JetElements

JetElements has 17 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 17 are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2025 was the busiest year with 9 disclosures.

The most common weakness is Cross-Site Scripting, behind 9 of the records (53%). Other recurring categories include Missing Authorization, Code Injection.

Every one of the 17 issues recorded for JetElements has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, most of them (9) reported by stealthcopter.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all JetElements vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2024-7145

JetElements <= 2.6.20 - Authenticated (Contributor+) Arbitrary Local File Inclusion

Read the full analysis

Vulnerability Records

17 records


2026-07-22 00:00	JetElements <= 2.9.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting JetElements <= 2.9.1.1	`CVE-2026-65465`	6.4 Medium	Ananda Dhakal	Yes
2025-12-30 05:20	JetElements For Elementor <= 2.7.12.2 - Authenticated (Contributor+) Stored Cross-Site Scripting JetElements <= 2.7.12.2	`CVE-2026-24958`	6.4 Medium	Bonds	Yes
2025-11-06 00:00	JetElements For Elementor <= 2.7.12 - Authenticated (Contributor+) Stored Cross-Site Scripting JetElements <= 2.7.12	`CVE-2025-64355`	6.4 Medium	Bonds	Yes
2025-08-14 00:00	JetElements For Elementor <= 2.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting JetElements <= 2.7.9	`CVE-2025-55714`	6.4 Medium	stealthcopter	Yes
2025-08-03 00:00	JetElements For Elementor <= 2.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting JetElements <= 2.7.8	`CVE-2025-49939`	6.4 Medium	stealthcopter	Yes
2025-07-16 00:00	JetElements For Elementor <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting JetElements <= 2.7.7	`CVE-2025-53982`	6.4 Medium	stealthcopter	Yes
2025-07-16 00:00	JetElements For Elementor <= 2.7.7 - Authenticated (Subscriber+) Information Disclosure JetElements <= 2.7.7	`CVE-2025-53983`	4.3 Medium	stealthcopter	Yes
2025-04-17 00:00	JetElements For Elementor <= 2.7.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting JetElements <= 2.7.4.1	`CVE-2025-39448`	6.4 Medium	stealthcopter	Yes
2025-04-17 00:00	JetElements For Elementor <= 2.7.4.1 - Missing Authorization JetElements <= 2.7.4.1	`CVE-2025-39447`	5.3 Medium	stealthcopter	Yes
2025-01-20 20:12	Jet Elements <= 2.7.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets JetElements <= 2.7.2.1	`CVE-2025-0371`	6.4 Medium	stealthcopter	Yes

Showing 1–10 of 17 reports