Vulnerabilities in jetmonsters

55 results
Vexday analysis

Jetmonsters acumula 45 vulnerabilidades catalogadas, com 4 classificadas como críticas e dominância de falhas de injeção (CWE-79). Embora nenhuma esteja sob exploração ativa conhecida, 9 vulnerabilidades foram publicadas nos últimos 90 dias, indicando um fluxo contínuo de descobertas que demanda monitoramento regular.

CVE-2025-58252MEDIUMWordPress Getwid Plugin <= 2.1.2 - Sensitive Data Exposure VulnerabilityEPSS 0.3%CVE-2026-11380MEDIUMJetWidgets For Elementor <= 1.0.21 - Authenticated (Author+) Stored Cross-Site Scripting via Animated Box 'animation_effect' SettingEPSS 0.3%CVE-2025-64384MEDIUMWordPress JetFormBuilder plugin <= 3.5.3 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-48258MEDIUMWordPress Mega Menu Block plugin <= 1.0.6 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2026-5924MEDIUMGetwid <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Google Maps 'customStyle'EPSS 0.3%CVE-2025-63078MEDIUMWordPress Restaurant Menu by MotoPress plugin <= 2.4.11 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-54195HIGHWordPress JetFormBuilder plugin <= 3.6.0.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-7845MEDIUMStratum – Elementor Widgets <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Google Maps and Image Hotspot WidgetsEPSS 0.2%CVE-2025-11991MEDIUMJetFormBuilder <= 3.5.3 - Missing Authorization to Unauthenticated Form GenerationEPSS 0.2%CVE-2025-8195MEDIUMJetWidgets For Elementor <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison and Subscribe WidgetsEPSS 0.2%CVE-2024-13642MEDIUMStratum – Elementor Widgets <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Vulnerability via Image Hotspot WidgetEPSS 0.2%CVE-2025-69013MEDIUMWordPress Stratum plugin <= 1.6.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-54038MEDIUMWordPress Restaurant Menu by MotoPress plugin <= 2.4.6 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.1%CVE-2026-92212MEDIUMJetFormBuilder <= 3.6.5.3 - Reflected Cross-Site Scripting via 'jfb_xss' (URL Query Variable) Parameter via Calculated FieldEPSS —CVE-2026-96568HIGHRestaurant Menu and Food Ordering <= 2.4.14 - Unauthenticated Stored Cross-Site Scripting via 'phone_number' ParameterEPSS —