Vulnerabilities / Jeg Kit for Elementor
Jeg Kit for Elementor vulnerabilities
Advisories WPSec published for Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress. Other sources may list more. Its attack surface: Jeg Kit for Elementor on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-10 | WPSEC-2026-0685 | Jeg Kit for Elementor <= 3.2.20 - Authenticated (Subscriber+) Missing Authorization to User Enumeration via Element Option and Author Search AJAX Actions | Medium 4.3 | 3.2.21 |
| 2026-10-01 | WPSEC-2026-0164 | Jeg Kit for Elementor <= 3.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-item-indicator' Attribute | Medium 6.4 | 3.2.20 |
| 2026-10-01 | WPSEC-2026-0163 | Jeg Kit for Elementor <= 3.2.19 - Unauthenticated Stored Cross-Site Scripting via Comments | High 7.2 | 3.2.20 |
License: CC BY 4.0