WordPress security by component
JetElements For Elementor
Plugin description
JetElements For Elementor is a WordPress component with 14 published CVE records in this archive. The latest tracked vulnerability was published Jul 23, 2026; the highest CVE/CNA score is 9.
Plugin slug:
jet-elementsLatest vulnerability
CVE-2026-65465: JetElements For Elementor: Cross-site scripting
JetElements For Elementor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 2.9.1.1.
| Safe version |
|
||
|---|---|---|---|
| Jul 23, 2026 |
CVE-2026-65465
JetElements For Elementor: Cross-site scripting
JetElements For Elementor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 2.9.1.1.
|
2.9.1.2 |
CVE6.5
NVDPending
|
| Feb 03, 2026 |
CVE-2026-24958
JetElements For Elementor: Cross-site scripting
JetElements For Elementor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Dec 18, 2025 |
CVE-2025-64355
JetElements For Elementor: Cross-site scripting
JetElements For Elementor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Oct 22, 2025 |
CVE-2025-49939
JetElements For Elementor: Cross-site scripting
JetElements For Elementor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Aug 20, 2025 |
CVE-2025-53983
JetElements For Elementor: A security weakness
JetElements For Elementor is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Aug 14, 2025 |
CVE-2025-55714
JetElements For Elementor: Cross-site scripting
JetElements For Elementor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Jul 16, 2025 |
CVE-2025-53982
JetElements For Elementor: Cross-site scripting
JetElements For Elementor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|
| May 19, 2025 |
CVE-2025-39447
JetElements For Elementor: A security weakness
JetElements For Elementor is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE7.5
NVDPending
|
| May 19, 2025 |
CVE-2025-39448
JetElements For Elementor: Cross-site scripting
JetElements For Elementor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Jun 19, 2024 |
CVE-2023-48761
JetElements For Elementor: A security weakness
JetElements For Elementor is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE6.3
NVD6.3
|
| Jun 19, 2024 |
CVE-2023-48760
JetElements For Elementor: A security weakness
JetElements For Elementor is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE8.2
NVD9.8
|
| Jun 19, 2024 |
CVE-2023-48759
JetElements For Elementor: A security weakness
JetElements For Elementor is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE7.5
NVD7.5
|
| Dec 31, 2023 |
CVE-2023-39157
JetElements For Elementor: Code execution
JetElements For Elementor is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
|
See mitigation notes |
CVE9.0
NVD8.8
|
| Dec 18, 2023 |
CVE-2023-48762
JetElements For Elementor: Cross-site request forgery
JetElements For Elementor is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE6.3
NVD8.8
|