Medium severity4.3NVD Advisory· Published Nov 26, 2024· Updated Jun 17, 2026

CVE-2024-8899

Description

The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.9 via the render_content function in class/elements/views/class-tabs-view.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jegtheme/Jeg Elementor Kit
cpe:2.3:a:jegtheme:jeg_elementor_kit:*:*:*:*:*:wordpress:*:*
Range: <2.6.10
WordPress/Jeg Elementor Kitllm-fuzzy2 versions
<=2.6.9+ 1 more
- (no CPE)range: <=2.6.9
- (no CPE)
Package: https://wordpress.org/plugins/jeg-elementor-kit
jegtheme/Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPressv5
Range: 0

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/changeset/3193980/jeg-elementor-kitnvdPatch
www.wordfence.com/threat-intel/vulnerabilities/id/4efc9c47-321a-4635-943f-785ffc34d851nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000