Vulnerabilidades en jegtheme
29 resultadosAnálisis Vexday
JegTheme acumula 25 vulnerabilidades na base Vexday, predominantemente XSS (CWE-79), sem registros de exploração ativa ou severidade crítica. Embora nenhuma ameaça imediata seja evidenciada, a descoberta recente de 2 falhas nos últimos 90 dias indica atividade contínua de pesquisa; recomenda-se acompanhar atualizações para mitigar vetores de injeção persistentes.
CVE-2025-39373MEDIUMWordPress JNews Theme <= 11.6.16 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-53573HIGHWordPress Epic Review Plugin <= 1.0.2 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-2916MEDIUMJeg Kit for Elementor <= 3.1.1 - Authenticated (Contributor+) Exposure of Sensitive Information via 'JkitDashboardOption' Inline ScriptEPSS 0.2%CVE-2026-13710MEDIUMJeg Kit for Elementor <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_body_description' Parameter via 'jkit_image_box' Shortcode/WidgetEPSS 0.2%CVE-2025-14275MEDIUMJeg Elementor Kit <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown WidgetEPSS 0.2%CVE-2025-67538MEDIUMWordPress JNews Gallery plugin < 12.0.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-68904HIGHWordPress JNews - Frontend Submit plugin <= 11.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-68906HIGHWordPress JNews - Video plugin <= 11.0.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-67591MEDIUMWordPress JNews Paywall plugin < 12.0.1 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%