CVE Database /
CVE-2026-6916
CVE · Medium
CVE-2026-6916 — Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress [jeg-elementor-kit] < 3.1.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-6916
|
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress [jeg-elementor-kit] < 3.1.1 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.4
|
< 3.1.1
|
3.1.1 |
2026-05-01 |
—
|
CVE-2026-6916
The Jeg Kit for Elementor plugin contains a security flaw that allows malicious users with contributor-level access or higher to embed unauthorized JavaScript code into WordPress pages through the 'sg_content_number_prefix' parameter. This vulnerability affects all versions of the plugin up to and including 3.1.0, where inadequate input validation and output protection enable the execution of arbitrary web scripts on affected sites.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings