WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
jc-importer
Published
2025-11-20
Title
Import WP – Export and Import CSV and XML files to WordPress < 2.14.18 - Unauthenticated Information Exposure
Slug
jcarousel-for-wordpress
Published
2024-12-12
Title
jCarousel <= 1.0 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
jch-optimize
Published
2023-03-02
Title
JCH Optimize < 3.2.3 - Admin+ Stored XSS
Slug
jch-optimize
Published
2024-05-13
Title
JCH Optimize < 4.2.1 - Authenticated (Subscriber+) Directory Traversal
Slug
jcwp-youtube-channel-embed
Published
2015-05-14
Title
Multiple Plugins - jQuery prettyPhoto DOM Cross-Site Scripting (XSS)
Slug
jds-portfolio
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
jeba-cute-forkit
Published
2025-11-10
Title
Jeba Cute forkit <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
jeeng-push-notifications
Published
2022-11-02
Title
Jeeng Push Notifications < 2.0.4 - Admin+ Stored Cross-Site Scripting
Slug
jeg-elementor-kit
Published
2022-11-04
Title
Jeg Elementor Kit < 2.5.7 - Subscriber+ Authorization Bypass
Slug
jeg-elementor-kit
Published
2022-11-04
Title
Jeg Elementor Kit < 2.5.7 - Unauthenticated Settings Update
Slug
jeg-elementor-kit
Published
2024-02-27
Title
Jeg Elementor Kit < 2.6.3 - Contributor+ Stored Cross-Site Scripting
Slug
jeg-elementor-kit
Published
2024-04-02
Title
Jeg Elementor Kit < 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial
Slug
jeg-elementor-kit
Published
2024-04-02
Title
Jeg Elementor Kit < 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box
Slug
jeg-elementor-kit
Published
2024-04-26
Title
Jeg Elementor Kit < 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Banner
Slug
jeg-elementor-kit
Published
2024-04-30
Title
Jeg Elementor Kit < 2.6.5 - Contributor+ Stored XSS via Countdown Widget
Slug
jeg-elementor-kit
Published
2024-04-30
Title
Jeg Elementor Kit < 2.6.5 - Contributor+ Stored XSS via Elementor Widget URL Custom Attributes
Slug
jeg-elementor-kit
Published
2024-06-14
Title
Jeg Elementor Kit < 2.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Tabs and JKit - Accordion Widgets
Slug
jeg-elementor-kit
Published
2024-08-26
Title
Jeg Elementor Kit < 2.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File
Slug
jeg-elementor-kit
Published
2024-09-30
Title
Jeg Elementor Kit < 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jeg-elementor-kit
Published
2024-11-25
Title
Jeg Elementor Kit < 2.6.10 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template
Slug
jeg-elementor-kit
Published
2024-11-25
Title
Jeg Elementor Kit < 2.6.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown Widget
Slug
jeg-elementor-kit
Published
2025-02-26
Title
Jeg Elementor Kit < 2.6.12 - Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvas
Slug
jeg-elementor-kit
Published
2025-05-09
Title
Jeg Elementor Kit < 2.6.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Button and Countdown Widgets
Slug
jeg-elementor-kit
Published
2025-10-03
Title
Jeg Elementor Kit < 2.7.0 - Author+ Stored XSS
Slug
jeg-elementor-kit
Published
2026-01-07
Title
Jeg Elementor Kit < 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget