Vulnerabilities in Jegtheme

29 results
Vexday analysis

Jegtheme apresenta dois CVEs documentados na base, ambos relacionados a injeção de script entre sites (CWE-79), sem registros de exploração ativa ou vulnerabilidades críticas. Nenhuma vulnerabilidade foi publicada nos últimos 90 dias, indicando risco moderado e estável, com foco em mitigação de falhas de validação de entrada.

CVE-2025-39373MEDIUMWordPress JNews Theme <= 11.6.16 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-53573HIGHWordPress Epic Review Plugin <= 1.0.2 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-2916MEDIUMJeg Kit for Elementor <= 3.1.1 - Authenticated (Contributor+) Exposure of Sensitive Information via 'JkitDashboardOption' Inline ScriptEPSS 0.2%CVE-2026-13710MEDIUMJeg Kit for Elementor <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_body_description' Parameter via 'jkit_image_box' Shortcode/WidgetEPSS 0.2%CVE-2025-14275MEDIUMJeg Elementor Kit <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown WidgetEPSS 0.2%CVE-2025-67538MEDIUMWordPress JNews Gallery plugin < 12.0.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-68904HIGHWordPress JNews - Frontend Submit plugin <= 11.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-68906HIGHWordPress JNews - Video plugin <= 11.0.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-67591MEDIUMWordPress JNews Paywall plugin < 12.0.1 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%