JE
Vendor
jegtheme
10 products with CVEs on record
46
CVEs
0
On KEV
3
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-103907
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
6.5
0%
Oct 14Jeg Kit for Elementor <= 3.2.19 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'jeg_find_author' AJAX Action
CVE-2026-96328
JP
JNews - Pay Writer
jegtheme
9.3
0%
Oct 9WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability
CVE-2026-100180
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
5.4
0%
Oct 3Jeg Kit for Elementor <= 3.2.19 - Unauthenticated Stored Cross-Site Scripting via Comment
CVE-2026-18405
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
7.2
1%
Sep 18Jeg Kit for Elementor <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content
CVE-2026-65549
JK
Jeg Kit for Elementor
jegtheme
7.2
1%
Aug 6WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability
CVE-2026-2916
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
4.3
0%
Aug 1Jeg Kit for Elementor <= 3.1.1 - Authenticated (Contributor+) Exposure of Sensitive Information via 'JkitDashboardOption' Inline Script
CVE-2026-13710
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
6.4
0%
Jul 10Jeg Kit for Elementor <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_body_description' Parameter via 'jkit_image_box' Shortcode/Widget
CVE-2026-6916
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
6.4
0%
May 2Jeg Kit for Elementor <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_content_number_prefix' Shortcode Attribute
CVE-2025-68906
JV
JNews - Video
jegtheme
7.1
0%
Jan 22WordPress JNews - Video plugin <= 11.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-68905
JP
JNews - Pay Writer
jegtheme
7.5
0%
Jan 22WordPress JNews - Pay Writer plugin <= 11.0.0 - Local File Inclusion vulnerability
CVE-2025-68904
JF
JNews - Frontend Submit
jegtheme
7.1
0%
Jan 22WordPress JNews - Frontend Submit plugin <= 11.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-14275
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
6.4
0%
Jan 8Jeg Elementor Kit <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
CVE-2025-67591
JP
JNews Paywall
jegtheme
4.3
0%
Dec 9WordPress JNews Paywall plugin < 12.0.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-67538
JG
JNews Gallery
jegtheme
6.5
0%
Dec 9WordPress JNews Gallery plugin < 12.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-53573
ER
Epic Review
jegtheme
7.1
0%
Nov 6WordPress Epic Review Plugin <= 1.0.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-39373
JN
JNews
jegtheme
5.3
0%
May 19WordPress JNews Theme <= 11.6.16 - Broken Access Control Vulnerability
CVE-2025-2944
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
6.4
0%
May 10Jeg Elementor Kit <= 2.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Button and Countdown Widgets
CVE-2024-13217
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
4.3
0%
Feb 27Jeg Elementor Kit <= 2.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvas
CVE-2024-10308
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
5.4
0%
Nov 26Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown Widget
CVE-2024-8899
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
4.3
0%
Nov 26Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template
CVE-2024-47390
JE
Jeg Elementor Kit
jegtheme
5.4
0%
Oct 5WordPress Jeg Elementor Kit plugin <= 2.6.8 - Cross Site Scripting (XSS) vulnerability
CVE-2024-6804
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
5.4
0%
Aug 27Jeg Elementor Kit <= 2.6.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File
CVE-2024-4479
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
5.4
0%
Jun 15Jeg Elementor Kit <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Tabs and JKit - Accordion Widgets
CVE-2024-3161
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
5.4
0%
May 2Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
CVE-2024-3819
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
5.4
1%
May 2Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Banner
CVE-2024-0334
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
5.4
0%
May 1Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Cross-Site Scripting via Elementor Widget URL Custom Attributes
CVE-2024-32721
JE
Jeg Elementor Kit
Jegtheme
5.4
0%
Apr 24WordPress Jeg Elementor Kit plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability
CVE-2024-3162
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
5.4
0%
Apr 3Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial
CVE-2024-1327
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
5.4
0%
Apr 3Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box
CVE-2024-29101
JE
Jeg Elementor Kit
Jegtheme
5.4
0%
Mar 19WordPress Jeg Elementor Kit plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability
CVE-2024-1326
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
5.4
1%
Mar 12Jeg Elementor Kit <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags
CVE-2022-3794
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
4.3
1%
Dec 22Jeg Elementor Kit <= 2.5.6 - Authorization Bypass
CVE-2022-3805
JK
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
7.5
2%
Dec 22Jeg Elementor Kit <= 2.5.6 - Unauthenticated Authorization Bypass