CVE-2026-11380Medium 6.4JetWidgets For Elementor <= 1.0.21 - Authenticated (Author+) Stored Cross-Site Scripting via Animated Box 'animation_effect' Setting0.3%
CVE-2025-8195Medium 6.4JetWidgets For Elementor <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison and Subscribe Widgets0.2%
CVE-2024-10323Medium 6.4JetWidgets For Elementor <= 1.0.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload0.3%
CVE-2024-4626Medium 6.4JetWidgets For Elementor <= 1.0.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_type and id Parameters0.3%
CVE-2024-2138Medium 6.4JetWidgets For Elementor <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box Widget0.4%
CVE-2024-2507Medium 6.4JetWidgets For Elementor <= 1.0.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Button URL0.3%
CVE-2023-0086Medium 5.4JetWidgets for Elementor <= 1.0.12 - Cross-Site Request Forgery to Settings Update0.4%