CVE-2024-10323

JetWidgets For Elementor (WordPress) is affected by a Stored XSS via REST API SVG File Upload in all versions up to 1.0.18. Root cause: insufficient input sanitization and output escaping. Exploitation requires Author-level access or higher and can inject scripts that run when the SVG is viewed. ...

CVE-2024-2138

CVE-2024-2138 concerns the WordPress plugin JetWidgets For Elementor. The Red Hat and Wordfence entries describe a stored cross-site scripting (XSS) vulnerability in the Animated Box widget, affecting all versions up to and including 1.0.15. The issue arises from insufficient input sanitization a...

CVE-2024-2507

CVE-2024-2507 affects JetWidgets For Elementor plugin for WordPress. All versions up to and including 1.0.16 are vulnerable to Stored Cross-Site Scripting via the widget button URL due to insufficient input sanitization and output escaping on user-supplied attributes. Exploitation requires authen...

CVE-2024-4626

CVE-2024-4626 affects the JetWidgets For Elementor plugin for WordPress. It enables Stored Cross-Site Scripting via the layout_type and id parameters in all versions

CVE-2021-24268

CVE-2021-24268 concerns the WordPress JetWidgets For Elementor plugin, affected versions prior to 1.0.9. The vulnerability is a stored Cross-Site Scripting (XSS) in multiple widgets, exploitable by lower-privilege users (e.g., contributors) via a similar method. The issue is documented across mul...