WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
jeg-elementor-kit
Published
2024-08-26
Title
Jeg Elementor Kit < 2.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File
Slug
jeg-elementor-kit
Published
2024-09-30
Title
Jeg Elementor Kit < 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jeg-elementor-kit
Published
2024-11-25
Title
Jeg Elementor Kit < 2.6.10 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template
Slug
jeg-elementor-kit
Published
2024-11-25
Title
Jeg Elementor Kit < 2.6.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown Widget
Slug
jeg-elementor-kit
Published
2025-02-26
Title
Jeg Elementor Kit < 2.6.12 - Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvas
Slug
jeg-elementor-kit
Published
2025-05-09
Title
Jeg Elementor Kit < 2.6.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Button and Countdown Widgets
Slug
jeg-elementor-kit
Published
2025-10-03
Title
Jeg Elementor Kit < 2.7.0 - Author+ Stored XSS
Slug
jeg-elementor-kit
Published
2026-01-07
Title
Jeg Elementor Kit < 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Slug
jeg-elementor-kit
Published
2026-05-01
Title
Jeg Kit for Elementor < 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_content_number_prefix' Shortcode Attribute
Slug
jeg-elementor-kit
Published
2026-07-09
Title
Jeg Kit for Elementor < 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_body_description' Parameter via 'jkit_image_box' Shortcode/Widget
Slug
jeg-elementor-kit
Published
2026-07-28
Title
Jeg Kit for Elementor < 3.2.11 - Author+ PHP Object Injection
Slug
jeg-elementor-kit
Published
2026-07-31
Title
Jeg Kit for Elementor < 3.1.2 - Authenticated (Contributor+) Exposure of Sensitive Information via 'JkitDashboardOption' Inline Script
Slug
jeg-elementor-kit
Published
2026-09-17
Title
Jeg Kit for Elementor < 3.2.17 - Unauthenticated Stored XSS via Comment Content
Slug
jeg-elementor-kit
Published
2026-10-02
Title
Jeg Kit for Elementor < 3.2.20 - Unauthenticated Stored Cross-Site Scripting via Comment
Slug
jeg-elementor-kit
Published
2026-10-13
Title
Jeg Kit for Elementor < 3.2.20 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'jeg_find_author' AJAX Action
Slug
jekyll-exporter
Published
2017-08-26
Title
Multiple Plugins - Unauthenticated RCE via PHPUnit
Slug
jemployee
Published
2024-10-15
Title
Job Board Manager for WordPress <= 1.0 - Unauthenticated Privilege Escalation
Slug
jet-appointments-booking
Published
2026-08-18
Title
JetAppointment < 2.5.2.1 - Unauthenticated SQL Injection
Slug
jet-appointments-booking
Published
2026-10-01
Title
JetAppointment < 2.5.3 - Unauthenticated Stored Cross-Site Scripting via 'friendlyTime' Parameter
Slug
jet-blocks
Published
2023-11-28
Title
JetBlocks For Elementor < 1.3.8.1 - Reflected Cross Site Scripting
Slug
jet-blocks
Published
2024-08-15
Title
JetBlocks < 1.3.12.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-blocks
Published
2025-03-29
Title
JetBlocks For Elementor < 1.3.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-blocks
Published
2025-04-17
Title
JetBlocks For Elementor < 1.3.16.1 - Missing Authorization
Slug
jet-blocks
Published
2025-07-16
Title
JetBlocks For Elementor < 1.3.19 - Authenticated (Subscriber+) Information Disclsoure
Slug
jet-blocks
Published
2025-07-16
Title
JetBlocks For Elementor < 1.3.19.1 - Authenticated (Contributor+) Stored Cross-Site Scripting