Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Jeg Elementor Kit 2.6.8

  • Severity: medium-risk
  • Status: Fixed
  • Publication: September 30, 2024

The Jeg Elementor Kit plugin for WordPress has a security issue called Stored Cross-Site Scripting. This means that versions up to 2.6.8 are at risk because they don’t properly clean up and protect the information that is put into the plugin. This can allow people who are logged in as contributors or higher to put harmful code into pages. When someone views that page, the code will run without their knowledge.

Detected in:

Jeg Elementor Kit fixed vulnerable versions: >= * <= 2.6.8
Jeg Kit for Elementor fixed vulnerable versions:
Jeg Kit for Elementor – Powerful Elementor Addons, Widgets & Templates for WordPress fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.