Login Request a demo
JE
Vendor
jetmonsters
15 products with CVEs on record
59
CVEs
0
On KEV
4
New 30D
Products
JD
JetFormBuilder — Dynamic Blocks Form Builder
jetmonsters
9.8
8 CVEs0 on KEV2 new
GG
Getwid – Gutenberg Blocks
jetmonsters
9.6
12 CVEs0 on KEV1 new
JE
JetFormBuilder
jetmonsters
9.9
7 CVEs0 on KEV1 new
JF
JetWidgets For Elementor
jetmonsters
6.4
6 CVEs0 on KEV0 new
RM
Restaurant Menu by MotoPress
jetmonsters
8.8
6 CVEs0 on KEV0 new
SW
Stratum Widgets for Elementor
jetmonsters
6.4
4 CVEs0 on KEV0 new
HB
Hotel Booking Lite
jetmonsters
9.8
3 CVEs0 on KEV0 new
MH
MotoPress Hotel Booking
jetmonsters
9.8
3 CVEs0 on KEV0 new
TA
Timetable and Event Schedule by MotoPress
jetmonsters
9.9
3 CVEs0 on KEV0 new
MA
MotoPress Appointment Booking
jetmonsters
6.5
2 CVEs0 on KEV0 new
EL
Emmet Lite
Jetmonsters
4.3
1 CVEs0 on KEV0 new
GE
Getwid
jetmonsters
4.3
1 CVEs0 on KEV0 new
MM
Mega Menu Block
jetmonsters
6.5
1 CVEs0 on KEV0 new
RM
Restaurant Menu and Food Ordering
jetmonsters
7.2
1 CVEs0 on KEV0 new
ST
Stratum
jetmonsters
4.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-103912
JD
JetFormBuilder — Dynamic Blocks Form Builder
jetmonsters
4.7
0%
Oct 10JetFormBuilder <= 3.6.6 - Reflected DOM-Based Cross-Site Scripting via 'query_var' Dynamic Preset via data-jfb-macro / JFB_FIELD:: Macro Renderer
CVE-2026-91862
GG
Getwid – Gutenberg Blocks
jetmonsters
6.4
0%
Oct 10Getwid <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-image-points'
CVE-2026-97342
JD
JetFormBuilder — Dynamic Blocks Form Builder
jetmonsters
7.2
0%
Oct 2JetFormBuilder <= 3.6.5.4 - Unauthenticated Stored Cross-Site Scripting via 'choice' Post Meta via Insert/Update Post Action
CVE-2026-102391
JE
JetFormBuilder
jetmonsters
7.1
0%
Sep 30WordPress JetFormBuilder plugin <= 3.6.5.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-96568
RM
Restaurant Menu and Food Ordering
jetmonsters
7.2
0%
Sep 25Restaurant Menu and Food Ordering <= 2.4.14 - Unauthenticated Stored Cross-Site Scripting via 'phone_number' Parameter
CVE-2026-92212
JD
JetFormBuilder — Dynamic Blocks Form Builder
jetmonsters
6.1
0%
Sep 25JetFormBuilder <= 3.6.5.3 - Reflected Cross-Site Scripting via 'jfb_xss' (URL Query Variable) Parameter via Calculated Field
CVE-2026-5924
GG
Getwid – Gutenberg Blocks
jetmonsters
6.4
0%
Sep 23Getwid <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Google Maps 'customStyle'
CVE-2026-12793
JD
JetFormBuilder — Dynamic Blocks Form Builder
jetmonsters
9.8
1%
Sep 16JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter
CVE-2026-90650
MH
MotoPress Hotel Booking
jetmonsters
7.2
0%
Sep 15MotoPress Hotel Booking <= 6.2.4 - Unauthenticated Stored Cross-Site Scripting via Stripe Webhook Event Object 'id'
CVE-2026-73400
RM
Restaurant Menu by MotoPress
jetmonsters
8.1
0%
Aug 18WordPress Restaurant Menu by MotoPress plugin <= 2.4.11 - Local File Inclusion vulnerability
CVE-2026-28140
JE
JetFormBuilder
jetmonsters
7.5
0%
Aug 6WordPress JetFormBuilder plugin <= 3.6.4.1 - Broken Access Control vulnerability
CVE-2026-9180
MA
MotoPress Appointment Booking
jetmonsters
5.3
1%
Jul 3MotoPress Appointment Booking <= 2.4.4 - Unauthenticated Insecure Direct Object Reference to 'payment_details.booking_id' Parameter
CVE-2026-57347
HB
Hotel Booking Lite
jetmonsters
6.5
0%
Jul 2WordPress Hotel Booking Lite plugin <= 6.0.3 - Sensitive Data Exposure vulnerability
CVE-2026-13459
JD
JetFormBuilder — Dynamic Blocks Form Builder
jetmonsters
5.3
1%
Jul 2JetFormBuilder <= 3.6.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'context' Parameter
CVE-2026-13454
MA
MotoPress Appointment Booking
jetmonsters
6.5
0%
Jul 1MotoPress Appointment Booking <= 2.4.5 - Authenticated (Staff+) SQL Injection via 's' Parameter
CVE-2026-11380
JF
JetWidgets For Elementor
jetmonsters
6.4
0%
Jul 1JetWidgets For Elementor <= 1.0.21 - Authenticated (Author+) Stored Cross-Site Scripting via Animated Box 'animation_effect' Setting
CVE-2026-57644
RM
Restaurant Menu by MotoPress
jetmonsters
8.5
0%
Jun 26WordPress Restaurant Menu by MotoPress plugin <= 2.4.10 - SQL Injection vulnerability
CVE-2025-63078
RM
Restaurant Menu by MotoPress
jetmonsters
4.3
0%
Jun 26WordPress Restaurant Menu by MotoPress plugin <= 2.4.11 - Broken Access Control vulnerability
CVE-2026-54196
JE
JetFormBuilder
Jetmonsters
6.8
0%
Jun 17WordPress JetFormBuilder plugin <= 3.6.1 - Privilege Escalation vulnerability
CVE-2026-54195
JE
JetFormBuilder
Jetmonsters
7.1
0%
Jun 17WordPress JetFormBuilder plugin <= 3.6.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-9228
TA
Timetable and Event Schedule by MotoPress
jetmonsters
4.3
0%
May 28Timetable and Event Schedule by MotoPress <= 2.4.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via action_get_event_data Function
CVE-2026-8684
MH
MotoPress Hotel Booking
jetmonsters
5.3
0%
May 22MotoPress Hotel Booking <= 6.0.1 - Missing Authorization to Unauthenticated Arbitrary Booking Notes Modification via mphb_update_booking_notes AJAX Action
CVE-2026-32525
JE
JetFormBuilder
jetmonsters
9.9
0%
Mar 25WordPress JetFormBuilder plugin <= 3.5.6.1 - Remote Code Execution (RCE) vulnerability
CVE-2026-4373
JD
JetFormBuilder — Dynamic Blocks Form Builder
jetmonsters
7.5
0%
Mar 21JetFormBuilder <= 3.5.6.2 - Unauthenticated Arbitrary File Read via Media Field
CVE-2025-69013
ST
Stratum
jetmonsters
4.3
0%
Dec 30WordPress Stratum plugin <= 1.6.1 - Broken Access Control vulnerability
CVE-2025-66078
HB
Hotel Booking Lite
jetmonsters
9.1
0%
Dec 18WordPress Hotel Booking Lite plugin <= 5.2.3 - Remote Code Execution (RCE) vulnerability
CVE-2025-49914
RM
Restaurant Menu by MotoPress
jetmonsters
6.5
0%
Dec 18WordPress Restaurant Menu by MotoPress plugin <= 2.4.7 - Sensitive Data Exposure vulnerability
CVE-2025-11991
JD
JetFormBuilder — Dynamic Blocks Form Builder
jetmonsters
5.3
0%
Dec 16JetFormBuilder <= 3.5.3 - Missing Authorization to Unauthenticated Form Generation
CVE-2025-8195
JF
JetWidgets For Elementor
jetmonsters
6.4
0%
Dec 13JetWidgets For Elementor <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison and Subscribe Widgets
CVE-2025-64384
JE
JetFormBuilder
jetmonsters
5.3
0%
Nov 13WordPress JetFormBuilder plugin <= 3.5.3 - Broken Access Control vulnerability
CVE-2025-58252
GE
Getwid
jetmonsters
4.3
0%
Sep 22WordPress Getwid Plugin <= 2.1.2 - Sensitive Data Exposure Vulnerability
CVE-2025-7845
SW
Stratum Widgets for Elementor
jetmonsters
6.4
0%
Aug 1Stratum – Elementor Widgets <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Google Maps and Image Hotspot Widgets
CVE-2025-54038
RM
Restaurant Menu by MotoPress
jetmonsters
5.4
0%
Jul 16WordPress Restaurant Menu by MotoPress plugin <= 2.4.6 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-53990
JE
JetFormBuilder
jetmonsters
7.2
1%
Jul 16WordPress JetFormBuilder plugin <= 3.5.1.2 - PHP Object Injection Vulnerability
CVE-2025-48258
MM
Mega Menu Block
jetmonsters
6.5
0%
May 19WordPress Mega Menu Block plugin <= 1.0.6 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-30846
RM
Restaurant Menu by MotoPress
jetmonsters
8.8
1%
Mar 27WordPress Restaurant Menu by MotoPress plugin <= 2.4.4 - Local File Inclusion vulnerability
CVE-2024-13642
SW
Stratum Widgets for Elementor
jetmonsters
5.4
0%
Jan 30Stratum – Elementor Widgets <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Vulnerability via Image Hotspot Widget
CVE-2024-5020
GG
Getwid – Gutenberg Blocks
jetmonsters
6.4
0%
Dec 4Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
CVE-2024-10316
SW
Stratum Widgets for Elementor
jetmonsters
4.3
1%
Nov 21Stratum – Elementor Widgets <= 1.4.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
CVE-2024-10872
GG
Getwid – Gutenberg Blocks
jetmonsters
5.4
0%
Nov 20Getwid – Gutenberg Blocks <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-10323
JF
JetWidgets For Elementor
jetmonsters
5.4
0%
Nov 12JetWidgets For Elementor <= 1.0.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2020-36840
TA
Timetable and Event Schedule by MotoPress
jetmonsters
9.8
0%
Oct 16Timetable and Event Schedule by MotoPress <= 2.3.8 - Missing Authorization
CVE-2024-7291
JD
JetFormBuilder — Dynamic Blocks Form Builder
jetmonsters
7.2
1%
Aug 3JetFormBuilder <= 3.3.4.1 - Authenticated (Administrator+) Privilege Escalation
CVE-2024-6489
GG
Getwid – Gutenberg Blocks
jetmonsters
5.3
0%
Jul 20Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authorization to Google API key update
CVE-2024-6491
GG
Getwid – Gutenberg Blocks
jetmonsters
4.3
0%
Jul 20Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authentication to MailChimp API key update
CVE-2024-4626
JF
JetWidgets For Elementor
jetmonsters
5.4
0%
Jun 20JetWidgets For Elementor <= 1.0.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_type and id Parameters
CVE-2024-5611
SW
Stratum Widgets for Elementor
jetmonsters
6.4
0%
Jun 15Stratum – Elementor Widgets <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
CVE-2024-4413
MH
MotoPress Hotel Booking
jetmonsters
9.8
1%
May 10Hotel Booking Lite <= 4.11.1 - Unauthenticated PHP Object Injection
CVE-2024-3588
GG
Getwid – Gutenberg Blocks
jetmonsters
5.4
1%
May 2Getwid – Gutenberg Blocks <= 2.0.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Countdown'
CVE-2024-3342
TA
Timetable and Event Schedule by MotoPress
jetmonsters
9.9
1%
Apr 27Timetable and Event Schedule by MotoPress <= 2.4.11 - Authenticated (Contributor+) SQL Injection
CVE-2024-31386
EL
Emmet Lite
Jetmonsters
4.3
0%
Apr 10Multiple WordPress themes affected by Cross-Site Request Forgery vulnerability
CVE-2024-2138
JF
JetWidgets For Elementor
jetmonsters
5.4
0%
Apr 9JetWidgets For Elementor <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box Widget
CVE-2024-2507
JF
JetWidgets For Elementor
jetmonsters
5.4
0%
Apr 9JetWidgets For Elementor <= 1.0.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Button URL
CVE-2024-1948
GG
Getwid – Gutenberg Blocks
jetmonsters
5.4
0%
Apr 9Getwid – Gutenberg Blocks <= 2.0.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block Content
CVE-2023-6963
GG
Getwid – Gutenberg Blocks
jetmonsters
5.3
1%
Feb 5Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypass
CVE-2023-6959
GG
Getwid – Gutenberg Blocks
jetmonsters
4.3
0%
Feb 5Getwid – Gutenberg Blocks <= 2.0.4 - Missing Authorization to Recaptcha API Key Modification
CVE-2023-1895
GG
Getwid – Gutenberg Blocks
jetmonsters
9.6
1%
Jun 9Getwid – Gutenberg Blocks <= 1.8.3 - Authenticated(Subscriber+) Server Side Request Forgery
CVE-2023-1910
GG
Getwid – Gutenberg Blocks
jetmonsters
4.3
1%
Jun 9Getwid – Gutenberg Blocks <= 1.8.3 - Improper Authorization via get_remote_templates REST endpoint