Vulnerabilities and Security Researches

Jeg Elementor Kit, CVE-2025-9978

CVE, Research URL: CVE-2025-9978
Home page URL: Security reports for Jeg Elementor Kit
Application: Jeg Elementor Kit
Published on: Oct 24, 2025
Research Description: The Jeg Kit for Elementor WordPress plugin before 2.7.0 does not sanitize SVG file contents when uploaded via xmlrpc.php, leading to a cross site scripting vulnerability.
Affected versions: max 2.7.0.
Status: vulnerable