jegtheme Vulnerabilities and Affected Products
Vulnerabilities associated with JNews - Frontend Submit.
Products
Clear product- Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress18 vulnerabilities
- Jeg Elementor Kit3 vulnerabilities
- jeg_elementor_kit3 vulnerabilities
- Epic Review1 vulnerability
- Jeg Kit for Elementor1 vulnerability
- JNews1 vulnerability
- JNews - Frontend Submit1 vulnerability
- JNews - Pay Writer1 vulnerability
- JNews - Video1 vulnerability
- JNews Gallery1 vulnerability
- JNews Paywall1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-68904HIGH | WordPress JNews - Frontend Submit plugin <= 11.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jegtheme JNews - Frontend Submit jnews-frontend-submit allows Reflected XSS.This issue affects JNews - Frontend Submit: from n/a through <= 11.0.0. CWE-79Jan 22, 2026 | CVSS7.1v3.1 | EPSS0.186% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |