Input validation vulnerability in Jeg Elementor Kit 2.6.9

The Jeg Elementor Kit plugin for WordPress has a security issue that allows hackers to insert harmful code into the plugin’s JKit – Countdown widget. This can happen in any version up to 2.6.9 because the plugin does not properly clean and protect the information that users provide. As a result, attackers who have contributor-level access or higher can add code to web pages that will run whenever someone visits the page.