Jetwidgets For Elementor@* Security Vulnerabilities and Issues — Jetwidgets For Elementor@* CVE List

Lucene search

CrocoblockJetwidgets For Elementor*

5 matches found

CVE•added 2024/11/12 7:15 a.m.•78 views

CVE-2024-10323

The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.0.18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level...

6.4CVSS5.7AI score0.00052EPSS

CVE•added 2024/04/09 7:15 p.m.•58 views

CVE-2024-2507

The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the widget button URL in all versions up to, and including, 1.0.16 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated atta...

6.4CVSS7.6AI score0.00196EPSS

CVE•added 2024/04/09 7:15 p.m.•55 views

CVE-2024-2138

The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Animated Box widget in all versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-le...

6.4CVSS7.6AI score0.00229EPSS

CVE•added 2024/06/20 2:15 a.m.•49 views

CVE-2024-4626

The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘layout_type’ and 'id' parameters in all versions up to, and including, 1.0.17 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with ...

6.4CVSS5.5AI score0.00265EPSS

CVE•added 2021/05/05 7:15 p.m.•45 views

CVE-2021-24268

The “JetWidgets For Elementor” WordPress Plugin before 1.0.9 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.

5.4CVSS5.2AI score0.00222EPSS