WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
jet-blog
Published
2025-07-17
Title
JetBlog < 2.4.4.1 - Reflected Cross-Site Scripting
Slug
jet-blog
Published
2025-12-30
Title
JetBlog < 2.4.7.1 - Missing Authorization
Slug
jet-blog
Published
2026-06-10
Title
JetBlog < 2.4.8.1 - Unauthenticated Information Exposure
Slug
jet-booking
Published
2026-03-10
Title
JetBooking < 4.0.3.1 - Unauthenticated SQL Injection via 'check_in_date' Parameter
Slug
jet-booking
Published
2026-06-17
Title
JetBooking < 4.0.4.2 - Unauthenticated SQL Injection
Slug
jet-booking
Published
2026-07-22
Title
JetBooking < 4.1.2.1 - Missing Authorization
Slug
jet-booking
Published
2026-07-22
Title
JetBooking < 4.1.2.1 - Authenticated (Custom+) Server-Side Request Forgery
Slug
jet-compare-wishlist
Published
2025-04-10
Title
JetCompareWishlist < 1.5.10 - Authenticated (Contributor+) Local File Inclusion
Slug
jet-elements
Published
2023-11-28
Title
JetElements For Elementor < 2.6.13.1 - Missing Authorization to Unauthenticated Arbitrary Attachment Download
Slug
jet-elements
Published
2024-08-15
Title
JetElements < 2.6.20.1 - Authenticated (Contributor+) Arbitrary Local File Inclusion
Slug
jet-elements
Published
2024-08-15
Title
JetElements < 2.6.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-elements
Published
2025-01-20
Title
Jet Elements < 2.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
jet-elements
Published
2025-04-17
Title
JetElements For Elementor < 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-elements
Published
2025-04-17
Title
JetElements For Elementor < 2.7.4.2 - Missing Authorization
Slug
jet-elements
Published
2025-07-16
Title
JetElements For Elementor < 2.7.7.1 - Authenticated (Subscriber+) Information Disclosure
Slug
jet-elements
Published
2025-07-16
Title
JetElements For Elementor < 2.7.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-elements
Published
2025-08-14
Title
JetElements For Elementor < 2.7.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-elements
Published
2025-08-03
Title
JetElements For Elementor < 2.7.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-elements
Published
2025-11-06
Title
JetElements For Elementor < 2.7.12.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-elements
Published
2025-12-30
Title
JetElements For Elementor < 2.7.12.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-elements
Published
2026-07-22
Title
JetElements < 2.9.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-engine
Published
2023-03-20
Title
JetEngine < 3.1.3.1 - Author+ Remote Code Execution
Slug
jet-engine
Published
2023-11-28
Title
JetEngine < 3.2.5 - Missing Authorization
Slug
jet-engine
Published
2023-11-28
Title
JetEngine < 3.2.5 - Authenticated (Contributor+) Privilege Escalation
Slug
jet-engine
Published
2025-01-17
Title
Jet Engine < 3.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via list_tag Parameter