Extension WordPress
Vulnérabilités Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
Cette page rassemble les failles publiées pour Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
19 fiches
Jeg Kit for Elementor <= 3.2.6 – Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_body_description' Parameter via 'jkit_image_box' Shortcode/Widget
The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Box widget's 'sg_body_description' parameter in versions up to, and including, 3.2.6.…
*-3.2.6
3.2.7
09/07/2026
Jeg Kit for Elementor <= 3.1.0 – Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_content_number_prefix' Shortcode Attribute
The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sg_content_number_prefix' parameter in all versions up to, and including, 3.1.0 due to…
*-3.1.0
3.1.1
01/05/2026
Jeg Elementor Kit <= 3.0.1 – Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.0.1 due to insufficient input sanitization in the countdown widget's redirect functionality. This makes it possible for authenticated…
*-3.0.1
3.0.2
07/01/2026
Jeg Kit for Elementor – Powerful Elementor Addons, Widgets & Templates for WordPress < 2.6.9 – Authenticated (Author+) Stored Cross-Site Scripting via SVG
The Jeg Kit for Elementor – Powerful Elementor Addons, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.6.9 due to insufficient…
*-2.6.9
2.7.0
03/10/2025
Jeg Elementor Kit <= 2.6.12 – Authenticated (Contributor+) Stored Cross-Site Scripting via Video Button and Countdown Widgets
The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video Button and Countdown Widgets in all versions up to, and including, 2.6.12 due to insufficient input sanitization and output escaping on…
*-2.6.12
2.6.13
09/05/2025
Jeg Elementor Kit <= 2.6.11 – Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvas
The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.11 via the 'expired_data' and 'build_content' functions. This makes it possible for authenticated attackers, with Contributor-level access and…
*-2.6.11
2.6.12
26/02/2025
Jeg Elementor Kit <= 2.6.9 – Authenticated (Contributor+) Stored Cross-Site Scripting via JKit – Countdown Widget
The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's JKit – Countdown widget in all versions up to, and including, 2.6.9 due to insufficient input sanitization and output escaping on user…
*-2.6.9
2.6.10
25/11/2024
Jeg Elementor Kit <= 2.6.9 – Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template
The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.9 via the render_content function in class/elements/views/class-tabs-view.php. This makes it possible for authenticated attackers, with Contributor-level access and…
*-2.6.9
2.6.10
25/11/2024
Jeg Elementor Kit <= 2.6.8 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access…
*-2.6.8
2.6.9
30/09/2024
Jeg Elementor Kit <= 2.6.7 – Authenticated (Author+) Stored Cross-Site Scripting via SVG File
The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.6.7 due to insufficient input sanitization and output escaping. This makes it possible for…
*-2.6.7
2.6.8
26/08/2024
Jeg Elementor Kit <= 2.6.5 – Authenticated (Contributor+) Stored Cross-Site Scripting via JKit – Tabs and JKit – Accordion Widgets
The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sg_general_toggle_tab_enable and sg_accordion_style attributes within the plugin's JKit – Tabs and JKit – Accordion widget, respectively, in all versions up to, and including,…
*-2.6.5
2.6.6
14/06/2024
Jeg Elementor Kit <= 2.6.4 – Authenticated (Contributor+) Cross-Site Scripting via Elementor Widget URL Custom Attributes
The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom attribute of a link in several Elementor widgets in all versions up to, and including, 2.6.4 due to insufficient input sanitization and…
*-2.6.4
2.6.5
30/04/2024
Jeg Elementor Kit <= 2.6.4 – Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the countdown widget's attributes in all versions up to, and including, 2.6.4 due to insufficient input sanitization and output escaping. This makes it possible…
*-2.6.4
2.6.5
30/04/2024
Jeg Elementor Kit <= 2.6.4 – Authenticated (Contributor+) Stored Cross-Site Scripting via JKit – Banner
The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's JKit – Banner widget in all versions up to, and including, 2.6.4 due to insufficient input sanitization and output escaping on user…
*-2.6.4
2.6.5
26/04/2024
Jeg Elementor Kit <= 2.6.3 – Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial
The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Testimonial Widget Attributes in all versions up to, and including, 2.6.3 due to insufficient input sanitization and output escaping. This makes it possible…
*-2.6.3
2.6.4
02/04/2024
Jeg Elementor Kit <= 2.6.3 – Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box
The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's image box widget in all versions up to, and including, 2.6.3 due to insufficient input sanitization and output escaping. This makes it…
*-2.6.3
2.6.4
02/04/2024
Jeg Elementor Kit <= 2.6.2 – Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags
The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTML Tag attributes in all versions up to, and including, 2.6.2 due to insufficient input sanitization and output escaping. This makes it possible for…
*-2.6.2
2.6.3
27/02/2024
Jeg Elementor Kit <= 2.5.6 – Unauthenticated Authorization Bypass
The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various functions used to update the plugin settings in versions up to, and including, 2.5.6. Unauthenticated users can use an easily available nonce, obtained from…
*-2.5.6
2.5.7
04/11/2022
Jeg Elementor Kit <= 2.5.6 – Authorization Bypass
The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various AJAX actions in versions up to, and including, 2.5.6. Authenticated users can use an easily available nonce value to create header templates and make…
*-2.5.6
2.5.7
04/11/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.