52 matches found
WordPress Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin <= 3.2.19 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure vulnerability
Missing Authorization to Authenticated Subscriber+ Sensitive Information Exposure vulnerability discovered by Kuba in WordPress Plugin Jeg Kit for Elementor versions = 3.2.19...
CVE-2026-103907
The JNews - Jeg Elementor Kit plugin for WordPress (versions up to and including 3.2.19 ) is vulnerable to unauthorized sensitive information exposure due to a missing capability check on the jkit_post_block and jeg_find_author AJAX actions. The wp_ajax_jkit_post_block handler returns the full op...
CVE-2026-103907 Jeg Kit for Elementor <= 3.2.19 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'jeg_find_author' AJAX Action
The JNews - Jeg Elementor Kit plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on both the 'jkitpostblock' and 'jegfindauthor' AJAX actions in versions up to, and including, 3.2.19. The 'wpajaxjkitpostblock' handler registered generically for eve...
CVE-2026-100180
The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 3.2.19 due to insufficient input sanitization and output escaping. This makes it possibl...
CVE-2026-100180
The Jeg Kit for Elementor WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 3.2.19 . The root cause is insufficient input sanitization and output escaping within the comment functionality. This allows unauthenticated attackers to inject arbitrary ...
EUVD-2026-91877
The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 3.2.19 due to insufficient input sanitization and output escaping. This makes it possibl...
CVE-2026-100180 Jeg Kit for Elementor <= 3.2.19 - Unauthenticated Stored Cross-Site Scripting via Comment
The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 3.2.19 due to insufficient input sanitization and output escaping. This makes it possibl...
CVE-2026-100180 Jeg Kit for Elementor <= 3.2.19 - Unauthenticated Stored Cross-Site Scripting via Comment
The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 3.2.19 due to insufficient input sanitization and output escaping. This makes it possibl...
PT-2026-104481
Name of the Vulnerable Software and Affected Versions Jeg Kit for Elementor versions prior to 3.2.20 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping within the comment functionality. This allows unauthenticated attackers to inject arbitrar...
CVE-2026-100180: Improper Neutralization of Input During Web Page Generation
The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 3.2.19 due to insufficient input sanitization and output escaping. This makes it possibl...
WordPress Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin <= 3.2.19 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Dthangws in WordPress Plugin Jeg Kit for Elementor versions = 3.2.19...
WordPress Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by daroo in WordPress Plugin Jeg Kit for Elementor versions = 3.2.16...
CVE-2026-18405
The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.2.16 due to insufficient input sanitization and output escaping. This makes it...
EUVD-2026-82852
The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.2.16 due to insufficient input sanitization and output escaping. This makes it...
CVE-2026-18405 Jeg Kit for Elementor <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content
The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.2.16 due to insufficient input sanitization and output escaping. This makes it...
CVE-2026-18405 Jeg Kit for Elementor <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content
The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.2.16 due to insufficient input sanitization and output escaping. This makes it...
CVE-2026-18405
Jeg Kit for Elementor (WordPress plugin) versions up to and including 3.2.16 are vulnerable to unauthenticated Stored Cross-Site Scripting (XSS) via Comment Content, caused by insufficient input sanitization and output escaping. An attacker can inject arbitrary scripts into comment fields; execut...
PT-2026-95341
Name of the Vulnerable Software and Affected Versions Jeg Kit for Elementor versions prior to 3.2.17 Description Stored Cross-Site Scripting XSS occurs due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages via...
CVE-2026-18405: Improper Neutralization of Input During Web Page Generation
The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.2.16 due to insufficient input sanitization and output escaping. This makes it...