WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
jeg-elementor-kit
Published
2025-05-09
Title
Jeg Elementor Kit < 2.6.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Button and Countdown Widgets
Slug
jeg-elementor-kit
Published
2025-10-03
Title
Jeg Elementor Kit < 2.7.0 - Author+ Stored XSS
Slug
jeg-elementor-kit
Published
2026-01-07
Title
Jeg Elementor Kit < 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Slug
jekyll-exporter
Published
2017-08-26
Title
Multiple Plugins - Unauthenticated RCE via PHPUnit
Slug
jemployee
Published
2024-10-15
Title
Job Board Manager for WordPress <= 1.0 - Unauthenticated Privilege Escalation
Slug
jet-blocks
Published
2023-11-28
Title
JetBlocks For Elementor < 1.3.8.1 - Reflected Cross Site Scripting
Slug
jet-blocks
Published
2024-08-15
Title
JetBlocks < 1.3.12.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-blocks
Published
2025-03-29
Title
JetBlocks For Elementor < 1.3.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-blocks
Published
2025-04-17
Title
JetBlocks For Elementor < 1.3.16.1 - Missing Authorization
Slug
jet-blocks
Published
2025-07-16
Title
JetBlocks For Elementor < 1.3.19 - Authenticated (Subscriber+) Information Disclsoure
Slug
jet-blocks
Published
2025-07-16
Title
JetBlocks For Elementor < 1.3.19.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-blocks
Published
2025-07-17
Title
JetBlocks For Elementor < 1.3.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-blog
Published
2025-04-11
Title
JetBlog < 2.4.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-blog
Published
2025-04-15
Title
JetBlog < 2.4.3.1 - Missing Authorization
Slug
jet-blog
Published
2025-08-03
Title
JetBlog < 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-blog
Published
2025-07-17
Title
JetBlog < 2.4.4.1 - Reflected Cross-Site Scripting
Slug
jet-blog
Published
2025-12-30
Title
JetBlog < 2.4.7.1 - Missing Authorization
Slug
jet-compare-wishlist
Published
2025-04-10
Title
JetCompareWishlist < 1.5.10 - Authenticated (Contributor+) Local File Inclusion
Slug
jet-elements
Published
2023-11-28
Title
JetElements For Elementor < 2.6.13.1 - Missing Authorization to Unauthenticated Arbitrary Attachment Download
Slug
jet-elements
Published
2024-08-15
Title
JetElements < 2.6.20.1 - Authenticated (Contributor+) Arbitrary Local File Inclusion
Slug
jet-elements
Published
2024-08-15
Title
JetElements < 2.6.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-elements
Published
2025-01-20
Title
Jet Elements < 2.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
jet-elements
Published
2025-04-17
Title
JetElements For Elementor < 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
jet-elements
Published
2025-04-17
Title
JetElements For Elementor < 2.7.4.2 - Missing Authorization
Slug
jet-elements
Published
2025-07-16
Title
JetElements For Elementor < 2.7.7.1 - Authenticated (Subscriber+) Information Disclosure