Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress

Güvenlik açıkları

• CVE-2022-3805kimlik doğrulamasız≤ 2.5.6

  Jeg Elementor Kit <= 2.5.6 - Unauthenticated Authorization Bypass

  Yüksek 7.5

• CVE-2026-18405kimlik doğrulamasız≤ 3.2.16

  Jeg Kit for Elementor <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content

  Yüksek 7.2

• CVE-2026-65549yazar+≤ 3.2.10

  WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability

  Yüksek 7.2

• CVE-2026-13710katılımcı+≤ 3.2.6

  Jeg Kit for Elementor <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_body_description' Parameter via 'jkit_image_box' Shortcode/Wid

  Orta 6.4

• CVE-2026-6916katılımcı+≤ 3.1.0

  Jeg Kit for Elementor <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_content_number_prefix' Shortcode Attribute

  Orta 6.4

• CVE-2025-14275katılımcı+≤ 3.0.1

  Jeg Elementor Kit <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

  Orta 6.4

• CVE-2025-2944katılımcı+≤ 2.6.12

  Jeg Elementor Kit <= 2.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Button and Countdown Widgets

  Orta 6.4

• CVE-2026-100180kimlik doğrulamasız≤ 3.2.19

  Jeg Kit for Elementor <= 3.2.19 - Unauthenticated Stored Cross-Site Scripting via Comment

  Orta 5.4

• CVE-2024-47390giriş gerekir≤ 2.6.8

  WordPress Jeg Elementor Kit plugin <= 2.6.8 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-32721giriş gerekir≤ 2.6.3

  WordPress Jeg Elementor Kit plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-29101giriş gerekir≤ 2.6.2

  WordPress Jeg Elementor Kit plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-10308katılımcı+≤ 2.6.9

  Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown Widget

  Orta 5.4

• CVE-2024-6804yazar+≤ 2.6.7

  Jeg Elementor Kit <= 2.6.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File

  Orta 5.4

• CVE-2024-4479katılımcı+≤ 2.6.5

  Jeg Elementor Kit <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Tabs and JKit - Accordion Widgets

  Orta 5.4

• CVE-2024-3819katılımcı+≤ 2.6.4

  Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Banner

  Orta 5.4

• CVE-2024-3161katılımcı+≤ 2.6.4

  Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

  Orta 5.4

• CVE-2024-0334katılımcı+≤ 2.6.4

  Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Cross-Site Scripting via Elementor Widget URL Custom Attributes

  Orta 5.4

• CVE-2024-1327katılımcı+≤ 2.6.3

  Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box

  Orta 5.4

• CVE-2024-1326katılımcı+≤ 2.6.2

  Jeg Elementor Kit <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags

  Orta 5.4

• CVE-2022-3794giriş gerekir≤ 2.5.6

  Jeg Elementor Kit <= 2.5.6 - Authorization Bypass

  Orta 4.3

• CVE-2026-2916katılımcı+≤ 3.1.1

  Jeg Kit for Elementor <= 3.1.1 - Authenticated (Contributor+) Exposure of Sensitive Information via 'JkitDashboardOption' Inline Script

  Orta 4.3

• CVE-2024-13217katılımcı+≤ 2.6.11

  Jeg Elementor Kit <= 2.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvas

  Orta 4.3

• CVE-2024-8899katılımcı+≤ 2.6.9

  Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template

  Orta 4.3