Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress

Уязвимости

• CVE-2022-3805без авторизации≤ 2.5.6

  Jeg Elementor Kit <= 2.5.6 - Unauthenticated Authorization Bypass

  Высокий 7.5

• CVE-2026-18405без авторизации≤ 3.2.16

  Jeg Kit for Elementor <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content

  Высокий 7.2

• CVE-2026-65549автор+≤ 3.2.10

  WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability

  Высокий 7.2

• CVE-2026-13710участник+≤ 3.2.6

  Jeg Kit for Elementor <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_body_description' Parameter via 'jkit_image_box' Shortcode/Wid

  Средний 6.4

• CVE-2026-6916участник+≤ 3.1.0

  Jeg Kit for Elementor <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_content_number_prefix' Shortcode Attribute

  Средний 6.4

• CVE-2025-14275участник+≤ 3.0.1

  Jeg Elementor Kit <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

  Средний 6.4

• CVE-2025-2944участник+≤ 2.6.12

  Jeg Elementor Kit <= 2.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Button and Countdown Widgets

  Средний 6.4

• CVE-2026-100180без авторизации≤ 3.2.19

  Jeg Kit for Elementor <= 3.2.19 - Unauthenticated Stored Cross-Site Scripting via Comment

  Средний 5.4

• CVE-2024-47390нужен вход≤ 2.6.8

  WordPress Jeg Elementor Kit plugin <= 2.6.8 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2024-32721нужен вход≤ 2.6.3

  WordPress Jeg Elementor Kit plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2024-29101нужен вход≤ 2.6.2

  WordPress Jeg Elementor Kit plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2024-10308участник+≤ 2.6.9

  Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown Widget

  Средний 5.4

• CVE-2024-6804автор+≤ 2.6.7

  Jeg Elementor Kit <= 2.6.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File

  Средний 5.4

• CVE-2024-4479участник+≤ 2.6.5

  Jeg Elementor Kit <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Tabs and JKit - Accordion Widgets

  Средний 5.4

• CVE-2024-3819участник+≤ 2.6.4

  Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Banner

  Средний 5.4

• CVE-2024-3161участник+≤ 2.6.4

  Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

  Средний 5.4

• CVE-2024-0334участник+≤ 2.6.4

  Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Cross-Site Scripting via Elementor Widget URL Custom Attributes

  Средний 5.4

• CVE-2024-1327участник+≤ 2.6.3

  Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box

  Средний 5.4

• CVE-2024-1326участник+≤ 2.6.2

  Jeg Elementor Kit <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags

  Средний 5.4

• CVE-2022-3794нужен вход≤ 2.5.6

  Jeg Elementor Kit <= 2.5.6 - Authorization Bypass

  Средний 4.3

• CVE-2026-2916участник+≤ 3.1.1

  Jeg Kit for Elementor <= 3.1.1 - Authenticated (Contributor+) Exposure of Sensitive Information via 'JkitDashboardOption' Inline Script

  Средний 4.3

• CVE-2024-13217участник+≤ 2.6.11

  Jeg Elementor Kit <= 2.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvas

  Средний 4.3

• CVE-2024-8899участник+≤ 2.6.9

  Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template

  Средний 4.3