Jegtheme Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress

• CVE-2026-103907 Medium 6.5 Jeg Kit for Elementor <= 3.2.19 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'jeg_find_author' AJAX Action 0.3%
• CVE-2026-100180 Medium 5.4 Jeg Kit for Elementor <= 3.2.19 - Unauthenticated Stored Cross-Site Scripting via Comment 0.2%
• CVE-2026-18405 High 7.2 Jeg Kit for Elementor <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content 0.5%
• CVE-2026-2916 Medium 4.3 Jeg Kit for Elementor <= 3.1.1 - Authenticated (Contributor+) Exposure of Sensitive Information via 'JkitDashboardOption' Inline Script 0.4%
• CVE-2026-13710 Medium 6.4 Jeg Kit for Elementor <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_body_description' Parameter via 'jkit_image_box' Shortcode/Widget 0.4%
• CVE-2026-6916 Medium 6.4 Jeg Kit for Elementor <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_content_number_prefix' Shortcode Attribute 0.4%
• CVE-2025-14275 Medium 6.4 Jeg Elementor Kit <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget 0.2%
• CVE-2025-2944 Medium 6.4 Jeg Elementor Kit <= 2.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Button and Countdown Widgets 0.4%
• CVE-2024-13217 Medium 4.3 Jeg Elementor Kit <= 2.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvas 0.4%
• CVE-2024-10308 Medium 6.4 Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown Widget 0.3%
• CVE-2024-8899 Medium 4.3 Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template 0.4%
• CVE-2024-6804 Medium 6.4 Jeg Elementor Kit <= 2.6.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File 0.4%
• CVE-2024-4479 Medium 6.4 Jeg Elementor Kit <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Tabs and JKit - Accordion Widgets 0.4%
• CVE-2024-3161 Medium 6.4 Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget 0.4%
• CVE-2024-3819 Medium 6.4 Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Banner 0.5%
• CVE-2024-0334 Medium 6.4 Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Cross-Site Scripting via Elementor Widget URL Custom Attributes 0.4%
• CVE-2024-3162 Medium 6.4 Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial 0.3%
• CVE-2024-1327 Medium 6.4 Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box 0.3%
• CVE-2024-1326 Medium 6.4 Jeg Elementor Kit <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags 0.5%
• CVE-2022-3794 Medium 5.4 Jeg Elementor Kit <= 2.5.6 - Authorization Bypass 0.7%
• CVE-2022-3805 High 8.6 Jeg Elementor Kit <= 2.5.6 - Unauthenticated Authorization Bypass 1.7%