PatchTheCVEjeg elementor kit vulnerabilities and fixes
Recent CVEs affecting jeg elementor kit, with upgrade or downgrade steps. 10 tracked.
Also searched as: jegelementorkit.
jeg elementor kit has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2025-02-27. Highest priority: CVE-2024-3819 (score 34/100).
- CVE-2024-8899 MEDIUM 4.3 UPGRADE The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up
- CVE-2024-6804 MEDIUM 6.4 UPGRADE The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads i
- CVE-2024-4479 MEDIUM 6.4 UPGRADE The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sg_general_tog
- CVE-2024-47390 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jegtheme
- CVE-2024-3819 MEDIUM 6.4 UPGRADE The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's JKit
- CVE-2024-3161 MEDIUM 6.4 UPGRADE The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the countdown widg
- CVE-2024-32721 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jegtheme
- CVE-2024-13217 MEDIUM 4.3 UPGRADE The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up
- CVE-2024-10308 MEDIUM 6.4 UPGRADE The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's JKit
- CVE-2024-0334 MEDIUM 6.4 UPGRADE The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom attribu
FAQ
How do I fix jeg elementor kit vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jeg elementor kit being exploited right now?
None of the tracked jeg elementor kit CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jeg elementor kit CVE should I patch first?
CVE-2024-3819 currently ranks highest (34/100): The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's JKit .