WordPress plugin
JetWidgets For Elementor security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 9 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium9
- Low0
All JetWidgets For Elementor vulnerabilities
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting via Animated Box 'animation_effect' Setting
≤1.0.21Update to 1.0.22
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison and Subscribe Widgets
≤1.0.20Update to 1.0.21
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
≤1.0.18Update to 1.0.19
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via layout_type and id Parameters
≤1.0.17Update to 1.0.18
- Medium6.4Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Button URL
≤1.0.16Update to 1.0.17
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box Widget
≤1.0.15Update to 1.0.16
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.0.13Update to 1.0.14
- Medium5.4Cross-Site Request Forgery to Settings Update
≤1.0.12Update to 1.0.13
- Medium6.4Contributor+ Stored Cross-Site Scripting
<1.0.9Update to 1.0.9
JetWidgets For Elementor: common questions
Does JetWidgets For Elementor have known vulnerabilities?
Yes. VulnCrest Radar lists 9 known vulnerabilities in JetWidgets For Elementor: 9 medium. None are known to affect version null.
How do I check which version of JetWidgets For Elementor I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent JetWidgets For Elementor vulnerability?
CVE-2026-11380, published Jun 30, 2026: JetWidgets For Elementor <= 1.0.21 - Authenticated (Author+) Stored Cross-Site Scripting via Animated Box 'animation_effect' Setting. Severity: Medium (CVSS 6.4).
Is any JetWidgets For Elementor vulnerability listed in CISA KEV?
No. None of the known JetWidgets For Elementor vulnerabilities is currently listed in the CISA KEV catalog.