Medium severity · published Dec 22, 2022
CVE-2022-3794
Jeg Elementor Kit <= 2.5.6 - Authorization Bypass
4.3
CVSS
0.7%
EPSS
No
On KEV
Description
The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various AJAX actions in versions up to, and including, 2.5.6. Authenticated users can use an easily available nonce value to create header templates and make additional changes to the site, as the plugin does not use capability checks for this purpose.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 52% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress · jegtheme
through 2.5.6 · source: vendor
JE
Jeg Elementor Kit · Jegtheme
before 2.5.7 · source: NVD
Affected product
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-3794
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-3794
Exploit
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2811758%40jeg-elementor-kit%2Ftrunk&old=2810568%40jeg-elementor-kit%2Ftrunk&sfp_email=&sfph_mail=
Product
https://wordpress.org/plugins/jeg-elementor-kit/#developers
www.wordfence.com
https://www.wordfence.com/threat-intel/vulnerabilities/id/84b616fa-ff64-49e8-8c4a-7d7bfdf758be?source=cve
Third Party Advisory
https://www.wordfence.com/threat-intel/vulnerabilities/id/84b616fa-ff64-49e8-8c4a-7d7bfdf758be
More from Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
7.5
CVE-2022-3805
Jeg Elementor Kit <= 2.5.6 - Unauthenticated Authorization Bypass
7.2
CVE-2026-18405
Jeg Kit for Elementor <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content
6.5
CVE-2026-103907
Jeg Kit for Elementor <= 3.2.19 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'jeg_find_author' AJAX Action
6.4
CVE-2026-13710
Jeg Kit for Elementor <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_body_description' Parameter via 'jkit_image_box' Shortcode/Widget
6.4
CVE-2026-6916
Jeg Kit for Elementor <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_content_number_prefix' Shortcode Attribute