jetmonsters JetWidgets For Elementor vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Latest jetmonsters JetWidgets For Elementor vulnerabilities

CVE-2026-11380 — JetWidgets For Elementor <= 1.0.21 - Authenticated (Author+) Stored Cross-Site Scripting via Animated Box 'animation_effect' Setting (CVSS 6.4)
CVE-2025-8195 — JetWidgets For Elementor <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison and Subscribe Widgets (CVSS 6.4)
CVE-2024-10323 — JetWidgets For Elementor <= 1.0.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload (CVSS 5.4)
CVE-2024-38772 — WordPress JetWidgets for Elementor and WooCommerce plugin <= 1.1.7 - Contributor+ Limited Local File Inclusion vulnerability (CVSS 6.5)
CVE-2024-4626 — JetWidgets For Elementor <= 1.0.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_type and id Parameters (CVSS 5.4)
CVE-2024-2507 — JetWidgets For Elementor <= 1.0.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Button URL (CVSS 5.4)
CVE-2024-2138 — JetWidgets For Elementor <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box Widget (CVSS 5.4)
CVE-2023-0034 — JetWidgets For Elementor < 1.0.14 - Contributor+ Stored XSS via Shortcode (CVSS 5.4)
CVE-2023-0086 — JetWidgets for Elementor <= 1.0.12 - Cross-Site Request Forgery to Settings Update (CVSS 6.5)
CVE-2021-24268 — JetWidgets For Elementor < 1.0.9 - Contributor+ Stored XSS (CVSS 5.4)