Plugin icon

JetWidgets For Elementor

jetwidgets-for-elementor

Vulnerabilities:

8

Last Updated:

September 19, 2025

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2025-12-12
Title
JetWidgets For Elementor < 1.0.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison and Subscribe Widgets
Fixed in
Fixed in 1.0.21
CVSS
6.4 (medium)
Published
2024-11-11
Title
JetWidgets For Elementor < 1.0.19 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Fixed in
Fixed in 1.0.19
CVSS
6.4 (medium)
Published
2024-06-19
Title
JetWidgets For Elementor < 1.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_type and id Parameters
Fixed in
Fixed in 1.0.18
CVSS
6.4 (medium)
Published
2024-03-20
Title
JetWidgets For Elementor < 1.0.17 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Button URL
Fixed in
Fixed in 1.0.17
CVSS
6.4 (medium)
Published
2024-03-13
Title
JetWidgets For Elementor < 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box Widget
Fixed in
Fixed in 1.0.16
CVSS
6.4 (medium)
Published
2023-01-04
Title
JetWidgets for Elementor < 1.0.13 - Settings Update via CSRF
Fixed in
Fixed in 1.0.13
CVSS
4.3 (medium)
Published
2022-12-21
Title
JetWidgets For Elementor < 1.0.14 - Contributor+ Stored XSS via Shortcode
Fixed in
Fixed in 1.0.14
CVSS
6.8 (medium)
Published
2021-04-13
Title
JetWidgets For Elementor < 1.0.9 - Contributor+ Stored XSS
Fixed in
Fixed in 1.0.9
CVSS
6.8 (medium)