CVE Database /
CVE-2025-49939
CVE · Medium
CVE-2025-49939 — JetElements For Elementor [jet-elements] < 2.7.8.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-49939
|
JetElements For Elementor [jet-elements] < 2.7.8.1 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.5
|
< 2.7.8.1
|
2.7.8.1 |
2025-08-03 |
—
|
CVE-2025-49939
The JetElements For Elementor plugin on WordPress contains a security flaw in versions 2.7.8 and earlier, which allows malicious users with contributor permissions or higher to insert unauthorized code into website content. This inserted code can then be executed by any visitor who views the affected page, posing a risk of data theft or other malicious activities.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings