Log in Start free

Jegtheme

Products

ProductCVEsExploitedLatest
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress21–Oct 14, 2026
Jeg Elementor Kit3–Oct 5, 2024
JNews - Pay Writer2–Oct 9, 2026
JNews - Frontend Submit1–Jan 22, 2026
JNews Gallery1–Dec 9, 2025
JNews Paywall1–Dec 9, 2025
Epic Review1–Nov 6, 2025
JNews - Video1–Jan 22, 2026
Jeg Kit for Elementor1–Aug 6, 2026
JNews1–May 19, 2025

Exploited and recent CVEs

  • CVE-2026-103907 Medium 6.5 Jeg Kit for Elementor <= 3.2.19 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'jeg_find_author' AJAX Action 0.3%
  • CVE-2026-96328 Critical 9.3 WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability 0.2%
  • CVE-2026-100180 Medium 5.4 Jeg Kit for Elementor <= 3.2.19 - Unauthenticated Stored Cross-Site Scripting via Comment 0.2%
  • CVE-2026-18405 High 7.2 Jeg Kit for Elementor <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content 0.5%
  • CVE-2026-65549 High 7.2 WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability 0.5%
  • CVE-2026-2916 Medium 4.3 Jeg Kit for Elementor <= 3.1.1 - Authenticated (Contributor+) Exposure of Sensitive Information via 'JkitDashboardOption' Inline Script 0.4%
  • CVE-2026-13710 Medium 6.4 Jeg Kit for Elementor <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_body_description' Parameter via 'jkit_image_box' Shortcode/Widget 0.4%
  • CVE-2026-6916 Medium 6.4 Jeg Kit for Elementor <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_content_number_prefix' Shortcode Attribute 0.4%
  • CVE-2025-68906 High 7.1 WordPress JNews - Video plugin <= 11.0.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-68905 High 7.5 WordPress JNews - Pay Writer plugin <= 11.0.0 - Local File Inclusion vulnerability 0.5%
  • CVE-2025-68904 High 7.1 WordPress JNews - Frontend Submit plugin <= 11.0.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-14275 Medium 6.4 Jeg Elementor Kit <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget 0.2%
  • CVE-2025-67591 Medium 4.3 WordPress JNews Paywall plugin < 12.0.1 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-67538 Medium 6.5 WordPress JNews Gallery plugin < 12.0.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-53573 High 7.1 WordPress Epic Review Plugin <= 1.0.2 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-39373 Medium 5.3 WordPress JNews Theme <= 11.6.16 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-2944 Medium 6.4 Jeg Elementor Kit <= 2.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Button and Countdown Widgets 0.4%
  • CVE-2024-13217 Medium 4.3 Jeg Elementor Kit <= 2.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvas 0.4%
  • CVE-2024-10308 Medium 6.4 Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown Widget 0.3%
  • CVE-2024-8899 Medium 4.3 Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template 0.4%
  • CVE-2024-47390 Medium 6.5 WordPress Jeg Elementor Kit plugin <= 2.6.8 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-6804 Medium 6.4 Jeg Elementor Kit <= 2.6.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File 0.4%
  • CVE-2024-4479 Medium 6.4 Jeg Elementor Kit <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Tabs and JKit - Accordion Widgets 0.4%
  • CVE-2024-3161 Medium 6.4 Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget 0.4%
  • CVE-2024-3819 Medium 6.4 Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Banner 0.5%
  • CVE-2024-0334 Medium 6.4 Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Cross-Site Scripting via Elementor Widget URL Custom Attributes 0.4%
  • CVE-2024-32721 Medium 6.5 WordPress Jeg Elementor Kit plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-3162 Medium 6.4 Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial 0.3%
  • CVE-2024-1327 Medium 6.4 Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box 0.3%
  • CVE-2024-29101 Medium 6.5 WordPress Jeg Elementor Kit plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability 0.4%