CVE Database /
CVE-2025-14275
CVE · Medium
CVE-2025-14275 — Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress [jeg-elementor-kit] < 3.0.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-14275
|
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress [jeg-elementor-kit] < 3.0.2 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.4
|
< 3.0.2
|
3.0.2 |
2026-01-07 |
—
|
CVE-2025-14275
The Jeg Elementor Kit plugin for WordPress contains a security flaw affecting all versions up to 3.0.1, which allows malicious users with at least contributor privileges to embed executable code in web pages viewed by administrators and others via an unsecured widget feature. This vulnerability arises from inadequate filtering of input data within the countdown widget's redirect mechanism. As a result, attackers can inject arbitrary JavaScript that will be executed when the page is loaded.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings