Plugin icon

Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress

jeg-elementor-kit

Vulnerabilities:

18

Last Updated:

May 5, 2026

Active Installs:

300000

Published
Title
Fixed in
CVSS
Published
2026-05-01
Title
Jeg Kit for Elementor < 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_content_number_prefix' Shortcode Attribute
Fixed in
Fixed in 3.1.1
CVSS
5.5 (medium)
Published
2026-01-07
Title
Jeg Elementor Kit < 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Fixed in
Fixed in 3.0.2
CVSS
6.4 (medium)
Published
2025-10-03
Title
Jeg Elementor Kit < 2.7.0 - Author+ Stored XSS
Fixed in
Fixed in 2.7.0
CVSS
6.8 (medium)
Published
2025-05-09
Title
Jeg Elementor Kit < 2.6.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Button and Countdown Widgets
Fixed in
Fixed in 2.6.13
CVSS
6.4 (medium)
Published
2025-02-26
Title
Jeg Elementor Kit < 2.6.12 - Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvas
Fixed in
Fixed in 2.6.12
CVSS
4.3 (medium)
Published
2024-11-25
Title
Jeg Elementor Kit < 2.6.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown Widget
Fixed in
Fixed in 2.6.10
CVSS
6.4 (medium)
Published
2024-11-25
Title
Jeg Elementor Kit < 2.6.10 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template
Fixed in
Fixed in 2.6.10
CVSS
4.3 (medium)
Published
2024-09-30
Title
Jeg Elementor Kit < 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.6.9
CVSS
6.4 (medium)
Published
2024-08-26
Title
Jeg Elementor Kit < 2.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File
Fixed in
Fixed in 2.6.8
CVSS
6.4 (medium)
Published
2024-06-14
Title
Jeg Elementor Kit < 2.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Tabs and JKit - Accordion Widgets
Fixed in
Fixed in 2.6.6
CVSS
6.4 (medium)
Published
2024-04-30
Title
Jeg Elementor Kit < 2.6.5 - Contributor+ Stored XSS via Elementor Widget URL Custom Attributes
Fixed in
Fixed in 2.6.5
CVSS
6.4 (medium)
Published
2024-04-30
Title
Jeg Elementor Kit < 2.6.5 - Contributor+ Stored XSS via Countdown Widget
Fixed in
Fixed in 2.6.5
CVSS
6.4 (medium)
Published
2024-04-26
Title
Jeg Elementor Kit < 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Banner
Fixed in
Fixed in 2.6.5
CVSS
6.4 (medium)
Published
2024-04-02
Title
Jeg Elementor Kit < 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial
Fixed in
Fixed in 2.6.4
CVSS
6.4 (medium)
Published
2024-04-02
Title
Jeg Elementor Kit < 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box
Fixed in
Fixed in 2.6.4
CVSS
6.4 (medium)
Published
2024-02-27
Title
Jeg Elementor Kit < 2.6.3 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 2.6.3
CVSS
6.4 (medium)
Published
2022-11-04
Title
Jeg Elementor Kit < 2.5.7 - Subscriber+ Authorization Bypass
Fixed in
Fixed in 2.5.7
CVSS
5.4 (medium)
Published
2022-11-04
Title
Jeg Elementor Kit < 2.5.7 - Unauthenticated Settings Update
Fixed in
Fixed in 2.5.7
CVSS
6.5 (medium)