WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
jeg-elementor-kit
Published
2024-09-30
Title
Jeg Elementor Kit < 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jeg-elementor-kit
Published
2024-11-25
Title
Jeg Elementor Kit < 2.6.10 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template
Slug
jeg-elementor-kit
Published
2024-11-25
Title
Jeg Elementor Kit < 2.6.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown Widget
Slug
jeg-elementor-kit
Published
2025-02-26
Title
Jeg Elementor Kit < 2.6.12 - Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvas
Slug
jeg-elementor-kit
Published
2025-05-09
Title
Jeg Elementor Kit < 2.6.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Button and Countdown Widgets
Slug
jeg-elementor-kit
Published
2025-10-03
Title
Jeg Elementor Kit < 2.7.0 - Author+ Stored XSS
Slug
jeg-elementor-kit
Published
2026-01-07
Title
Jeg Elementor Kit < 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Slug
jeg-elementor-kit
Published
2026-05-01
Title
Jeg Kit for Elementor < 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_content_number_prefix' Shortcode Attribute
Slug
jeg-elementor-kit
Published
2026-07-09
Title
Jeg Kit for Elementor < 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_body_description' Parameter via 'jkit_image_box' Shortcode/Widget
Slug
jeg-elementor-kit
Published
2026-07-28
Title
Jeg Kit for Elementor < 3.2.11 - Author+ PHP Object Injection
Slug
jeg-elementor-kit
Published
2026-07-31
Title
Jeg Kit for Elementor < 3.1.2 - Authenticated (Contributor+) Exposure of Sensitive Information via 'JkitDashboardOption' Inline Script
Slug
jekyll-exporter
Published
2017-08-26
Title
Multiple Plugins - Unauthenticated RCE via PHPUnit
Slug
jemployee
Published
2024-10-15
Title
Job Board Manager for WordPress <= 1.0 - Unauthenticated Privilege Escalation
Slug
jet-appointments-booking
Published
2026-08-18
Title
JetAppointment < 2.5.2.1 - Unauthenticated SQL Injection
Slug
jet-blocks
Published
2023-11-28
Title
JetBlocks For Elementor < 1.3.8.1 - Reflected Cross Site Scripting
Slug
jet-blocks
Published
2024-08-15
Title
JetBlocks < 1.3.12.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-blocks
Published
2025-03-29
Title
JetBlocks For Elementor < 1.3.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-blocks
Published
2025-04-17
Title
JetBlocks For Elementor < 1.3.16.1 - Missing Authorization
Slug
jet-blocks
Published
2025-07-16
Title
JetBlocks For Elementor < 1.3.19 - Authenticated (Subscriber+) Information Disclsoure
Slug
jet-blocks
Published
2025-07-16
Title
JetBlocks For Elementor < 1.3.19.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-blocks
Published
2025-07-17
Title
JetBlocks For Elementor < 1.3.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-blocks
Published
2026-08-01
Title
JetBlocks for Elementor < 1.5.0.1 - Unauthenticated Information Exposure
Slug
jet-blog
Published
2025-04-11
Title
JetBlog < 2.4.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-blog
Published
2025-04-15
Title
JetBlog < 2.4.3.1 - Missing Authorization
Slug
jet-blog
Published
2025-08-03
Title
JetBlog < 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting