JE
Vendor
jegtheme
46
CVEs
0
On KEV
3
New 30D
Products
JP9.3
JNews - Pay Writer
jegtheme
2 CVEs0 on KEV1 new
JK7.5
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
jegtheme
21 CVEs0 on KEV2 new
JE7.5
Jeg Elementor Kit
jegtheme
16 CVEs0 on KEV0 new
ER7.1
Epic Review
jegtheme
1 CVEs0 on KEV0 new
JK7.2
Jeg Kit for Elementor
jegtheme
1 CVEs0 on KEV0 new
JN5.3
JNews
jegtheme
1 CVEs0 on KEV0 new
JF7.1
JNews - Frontend Submit
jegtheme
1 CVEs0 on KEV0 new
JG6.5
JNews Gallery
jegtheme
1 CVEs0 on KEV0 new
JP4.3
JNews Paywall
jegtheme
1 CVEs0 on KEV0 new
JV7.1
JNews - Video
jegtheme
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-103907 | JK Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress jegtheme | 6.5 | Oct 14 | Jeg Kit for Elementor <= 3.2.19 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'jeg_find_author' AJAX Action |
| CVE-2026-96328 | JP JNews - Pay Writer jegtheme | 9.3 | Oct 9 | WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability |
| CVE-2026-100180 | JK Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress jegtheme | 5.4 | Oct 3 | Jeg Kit for Elementor <= 3.2.19 - Unauthenticated Stored Cross-Site Scripting via Comment |
| CVE-2026-18405 | JK Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress jegtheme | 7.2 | Sep 18 | Jeg Kit for Elementor <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content |
| CVE-2026-65549 | JK Jeg Kit for Elementor jegtheme | 7.2 | Aug 6 | WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability |
| CVE-2026-2916 | JK Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress jegtheme | 4.3 | Aug 1 | Jeg Kit for Elementor <= 3.1.1 - Authenticated (Contributor+) Exposure of Sensitive Information via 'JkitDashboardOption' Inline Script |
| CVE-2026-13710 | JK Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress jegtheme | 6.4 | Jul 10 | Jeg Kit for Elementor <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_body_description' Parameter via 'jkit_image_box' Shortcode/Widget |
| CVE-2026-6916 | JK Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress jegtheme | 6.4 | May 2 | Jeg Kit for Elementor <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_content_number_prefix' Shortcode Attribute |
| CVE-2025-68906 | JV JNews - Video jegtheme | 7.1 | Jan 22 | WordPress JNews - Video plugin <= 11.0.2 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-68905 | JP JNews - Pay Writer jegtheme | 7.5 | Jan 22 | WordPress JNews - Pay Writer plugin <= 11.0.0 - Local File Inclusion vulnerability |
| CVE-2025-68904 | JF JNews - Frontend Submit jegtheme | 7.1 | Jan 22 | WordPress JNews - Frontend Submit plugin <= 11.0.0 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-14275 | JK Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress jegtheme | 6.4 | Jan 8 | Jeg Elementor Kit <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget |
| CVE-2025-67591 | JP JNews Paywall jegtheme | 4.3 | Dec 9 | WordPress JNews Paywall plugin < 12.0.1 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2025-67538 | JG JNews Gallery jegtheme | 6.5 | Dec 9 | WordPress JNews Gallery plugin < 12.0.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-53573 | ER Epic Review jegtheme | 7.1 | Nov 6 | WordPress Epic Review Plugin <= 1.0.2 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-39373 | JN JNews jegtheme | 5.3 | May 19 | WordPress JNews Theme <= 11.6.16 - Broken Access Control Vulnerability |
| CVE-2025-2944 | JK Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress jegtheme | 6.4 | May 10 | Jeg Elementor Kit <= 2.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Button and Countdown Widgets |
| CVE-2024-13217 | JK Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress jegtheme | 4.3 | Feb 27 | Jeg Elementor Kit <= 2.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvas |
| CVE-2024-10308 | JK Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress jegtheme | 5.4 | Nov 26 | Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown Widget |
| CVE-2024-8899 | JK Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress jegtheme | 4.3 | Nov 26 | Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template |
| CVE-2024-47390 | JE Jeg Elementor Kit jegtheme | 5.4 | Oct 5 | WordPress Jeg Elementor Kit plugin <= 2.6.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-6804 | JK Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress jegtheme | 5.4 | Aug 27 | Jeg Elementor Kit <= 2.6.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File |
| CVE-2024-4479 | JK Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress jegtheme | 5.4 | Jun 15 | Jeg Elementor Kit <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Tabs and JKit - Accordion Widgets |
| CVE-2024-3161 | JK Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress jegtheme | 5.4 | May 2 | Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget |
| CVE-2024-3819 | JK Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress jegtheme | 5.4 | May 2 | Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Banner |
| CVE-2024-0334 | JK Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress jegtheme | 5.4 | May 1 | Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Cross-Site Scripting via Elementor Widget URL Custom Attributes |
| CVE-2024-32721 | JE Jeg Elementor Kit Jegtheme | 5.4 | Apr 24 | WordPress Jeg Elementor Kit plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-3162 | JK Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress jegtheme | 5.4 | Apr 3 | Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial |
| CVE-2024-1327 | JK Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress jegtheme | 5.4 | Apr 3 | Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box |
| CVE-2024-29101 | JE Jeg Elementor Kit Jegtheme | 5.4 | Mar 19 | WordPress Jeg Elementor Kit plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-1326 | JK Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress jegtheme | 5.4 | Mar 12 | Jeg Elementor Kit <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags |
| CVE-2022-3794 | JK Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress jegtheme | 4.3 | Dec 22 | Jeg Elementor Kit <= 2.5.6 - Authorization Bypass |
| CVE-2022-3805 | JK Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress jegtheme | 7.5 | Dec 22 | Jeg Elementor Kit <= 2.5.6 - Unauthenticated Authorization Bypass |
