Jeg Elementor Kit vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

JE

Product

Jeg Elementor Kit

by jegtheme · last CVE Feb 27, 2025

16

CVEs

0

On KEV

7.5

Max CVSS

0

New 30D

Vulnerabilities16 In the news0 Timeline

Severity mix

Critical 0High 1Medium 15Low 0

Severity

All severities16 Critical0 High1 Medium15 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Jeg Elementor Kit to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-3805	7.5	2%	Dec 22	Jeg Elementor Kit <= 2.5.6 - Unauthenticated Authorization Bypass Affected: before 2.5.7
CVE-2024-10308	5.4	0%	Nov 26	Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown Widget Affected: before 2.6.10
CVE-2024-47390	5.4	0%	Oct 5	WordPress Jeg Elementor Kit plugin <= 2.6.8 - Cross Site Scripting (XSS) vulnerability Affected: through 2.6.8
CVE-2024-6804	5.4	0%	Aug 27	Jeg Elementor Kit <= 2.6.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Affected: before 2.6.8
CVE-2024-4479	5.4	0%	Jun 15	Jeg Elementor Kit <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Tabs and JKit - Accordion Widgets Affected: before 2.6.6
CVE-2024-3161	5.4	0%	May 2	Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget Affected: before 2.6.5
CVE-2024-3819	5.4	1%	May 2	Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Banner Affected: before 2.6.5
CVE-2024-0334	5.4	0%	May 1	Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Cross-Site Scripting via Elementor Widget URL Custom Attributes Affected: before 2.6.5
CVE-2024-32721	5.4	0%	Apr 24	WordPress Jeg Elementor Kit plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability Affected: through 2.6.3
CVE-2024-3162	5.4	0%	Apr 3	Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Affected: before 2.6.4
CVE-2024-1327	5.4	0%	Apr 3	Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box Affected: before 2.6.4
CVE-2024-29101	5.4	0%	Mar 19	WordPress Jeg Elementor Kit plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability Affected: through 2.6.2
CVE-2024-1326	5.4	1%	Mar 12	Jeg Elementor Kit <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags Affected: before 2.6.3
CVE-2024-13217	4.3	0%	Feb 27	Jeg Elementor Kit <= 2.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvas Affected: through 2.6.11
CVE-2024-8899	4.3	0%	Nov 26	Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template Affected: before 2.6.10
CVE-2022-3794	4.3	1%	Dec 22	Jeg Elementor Kit <= 2.5.6 - Authorization Bypass Affected: before 2.5.7