Really Simple Security logo

Log out
Get PRO

Latest

Access violation vulnerability in JetTabs for Elementor 2.1.25.1

  • Severity: high-risk
  • Status: Fixed
  • Publication: November 28, 2023

Crocoblock, a company that makes plugins for WordPress websites, has identified a vulnerability in multiple of their plugins. An unknown function in various versions of the plugins was lacking a capability check, which means that unauthenticated attackers could take unauthorized actions.

Detected in:

JetBlocks for Elementor fixed vulnerable versions: >= * <= 1.3.8
JetBlog fixed vulnerable versions:
JetBlog for Elementor fixed vulnerable versions: >= * <= 2.3.5
JetCompareWishlist fixed vulnerable versions:
JetCompareWishlist for Elementor fixed vulnerable versions: >= * <= 1.5.5.1
JetElements fixed vulnerable versions: >= * <= 2.6.13
JetMenu fixed vulnerable versions:
JetMenu for Elementor fixed vulnerable versions: >= * <= 2.4.1
JetProductGallery fixed vulnerable versions: >= * <= 2.1.13.1
JetReviews fixed vulnerable versions:
JetReviews for Elementor fixed vulnerable versions: >= * <= 2.3.2
JetSmartFilters fixed vulnerable versions:
JetSmartFilters for Elementor fixed vulnerable versions: >= * <= 3.2.2
JetTabs fixed vulnerable versions:
JetTabs for Elementor fixed vulnerable versions: >= * <= 2.1.25.1
JetThemeCore for Elementor fixed vulnerable versions: >= * <= 2.1.2.1
JetTricks fixed vulnerable versions:
JetTricks for Elementor fixed vulnerable versions: >= * <= 1.4.6.1
JetWooBuilder fixed vulnerable versions:
JetWooBuilder for Elementor fixed vulnerable versions: >= * <= 2.1.7.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.