Vulnerabilities in jegtheme

30 results
Vexday analysis

JegTheme acumula 25 vulnerabilidades na base Vexday, predominantemente XSS (CWE-79), sem registros de exploração ativa ou severidade crítica. Embora nenhuma ameaça imediata seja evidenciada, a descoberta recente de 2 falhas nos últimos 90 dias indica atividade contínua de pesquisa; recomenda-se acompanhar atualizações para mitigar vetores de injeção persistentes.

CVE-2024-10308MEDIUMJeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown WidgetEPSS 0.3%CVE-2026-18405HIGHJeg Kit for Elementor <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting via Comment ContentEPSS 0.3%CVE-2025-39373MEDIUMWordPress JNews Theme <= 11.6.16 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2024-47390MEDIUMWordPress Jeg Elementor Kit plugin <= 2.6.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-14275MEDIUMJeg Elementor Kit <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown WidgetEPSS 0.2%CVE-2025-68904HIGHWordPress JNews - Frontend Submit plugin <= 11.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-53573HIGHWordPress Epic Review Plugin <= 1.0.2 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-68906HIGHWordPress JNews - Video plugin <= 11.0.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-67538MEDIUMWordPress JNews Gallery plugin < 12.0.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-67591MEDIUMWordPress JNews Paywall plugin < 12.0.1 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%