Skip to content
OpenAdvisories

Vendor

jegtheme

33 known vulnerabilities.

Products

Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress 21 Jeg Elementor Kit 3 JNews - Pay Writer 2 JNews 1 Jeg Kit for Elementor 1 JNews - Video 1 JNews Gallery 1 JNews - Frontend Submit 1 JNews Paywall 1 Epic Review 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.2
    CVE-2026-18405

    Jeg Kit for Elementor <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content

    The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.2.16 due to insufficient input sanitizat…

    jegtheme Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress Web / CMS
  • High 7.2
    CVE-2026-65549

    WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability

    Author PHP Object Injection in Jeg Kit for Elementor <= 3.2.10 versions.

    jegtheme Jeg Kit for Elementor
  • High 7.1
    CVE-2025-68906

    WordPress JNews - Video plugin <= 11.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jegtheme JNews - Video jnews-video allows Reflected XSS.This issue affects JNews - Video: from n/a through <= 11.0.2.

    jegtheme JNews - Video
  • High 7.5
    CVE-2025-68905

    WordPress JNews - Pay Writer plugin <= 11.0.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jegtheme JNews - Pay Writer jnews-pay-writer allows PHP Local File Inclusion.This issue affects JNews - Pay Writer: from n/a through <= 11…

    jegtheme JNews - Pay Writer
  • High 7.1
    CVE-2025-68904

    WordPress JNews - Frontend Submit plugin <= 11.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jegtheme JNews - Frontend Submit jnews-frontend-submit allows Reflected XSS.This issue affects JNews - Frontend Submit: from n/a through <= 11.0.0.

    jegtheme JNews - Frontend Submit
  • High 7.1
    CVE-2025-53573

    WordPress Epic Review Plugin <= 1.0.2 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jegtheme Epic Review epic-review allows Reflected XSS.This issue affects Epic Review: from n/a through <= 1.0.2.

    jegtheme Epic Review
  • High 8.6
    CVE-2022-3805

    Jeg Elementor Kit <= 2.5.6 - Unauthenticated Authorization Bypass

    The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various functions used to update the plugin settings in versions up to, and including, 2.5.6. Unauthenticated users can use an easily available nonce, obtained from pages edit…

    jegtheme Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress Web / CMS