CVEs we hold for Jetmonsters

Records whose assigning authority named Jetmonsters as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-9228Timetable and Event Schedule by MotoPress <= 2.4.16 - Insecure Direct Object Reference to Authenticated (Contributor+)…jetmonsters Timetable and Event Schedule by MotoPress

CVE-2026-9180MotoPress Appointment Booking <= 2.4.4 - Unauthenticated Insecure Direct Object Reference to…jetmonsters MotoPress Appointment Booking

CVE-2026-90650MotoPress Hotel Booking <= 6.2.4 - Unauthenticated Stored Cross-Site Scripting via Stripe Webhook Event Object 'id'jetmonsters MotoPress Hotel Booking

CVE-2026-8684MotoPress Hotel Booking <= 6.0.1 - Missing Authorization to Unauthenticated Arbitrary Booking Notes Modification via…jetmonsters MotoPress Hotel Booking

CVE-2026-73400WordPress Restaurant Menu by MotoPress plugin <= 2.4.11 - Local File Inclusion vulnerabilityjetmonsters Restaurant Menu by MotoPress

CVE-2026-57644WordPress Restaurant Menu by MotoPress plugin <= 2.4.10 - SQL Injection vulnerabilityjetmonsters Restaurant Menu by MotoPress

CVE-2026-57347WordPress Hotel Booking Lite plugin <= 6.0.3 - Sensitive Data Exposure vulnerabilityjetmonsters Hotel Booking Lite

CVE-2026-54196WordPress JetFormBuilder plugin <= 3.6.1 - Privilege Escalation vulnerabilityJetmonsters JetFormBuilder

CVE-2026-54195WordPress JetFormBuilder plugin <= 3.6.0.1 - Cross Site Scripting (XSS) vulnerabilityJetmonsters JetFormBuilder

CVE-2026-4373JetFormBuilder <= 3.5.6.2 - Unauthenticated Arbitrary File Read via Media Fieldjetmonsters JetFormBuilder — Dynamic Blocks Form Builder

CVE-2026-32525WordPress JetFormBuilder plugin <= 3.5.6.1 - Remote Code Execution (RCE) vulnerabilityjetmonsters JetFormBuilder

CVE-2026-28140WordPress JetFormBuilder plugin <= 3.6.4.1 - Broken Access Control vulnerabilityjetmonsters JetFormBuilder

CVE-2026-13459JetFormBuilder <= 3.6.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'context'…jetmonsters JetFormBuilder — Dynamic Blocks Form Builder

CVE-2026-13454MotoPress Appointment Booking <= 2.4.5 - Authenticated (Staff+) SQL Injection via 's' Parameterjetmonsters MotoPress Appointment Booking

CVE-2026-12793JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameterjetmonsters JetFormBuilder — Dynamic Blocks Form Builder

CVE-2026-11380JetWidgets For Elementor <= 1.0.21 - Authenticated (Author+) Stored Cross-Site Scripting via Animated Box…jetmonsters JetWidgets For Elementor

CVE-2025-8195JetWidgets For Elementor <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison and…jetmonsters JetWidgets For Elementor

CVE-2025-7845Stratum – Elementor Widgets <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Google…jetmonsters Stratum Widgets for Elementor

CVE-2025-69013WordPress Stratum plugin <= 1.6.1 - Broken Access Control vulnerabilityjetmonsters Stratum

CVE-2025-66078WordPress Hotel Booking Lite plugin <= 5.2.3 - Remote Code Execution (RCE) vulnerabilityjetmonsters Hotel Booking Lite

CVE-2025-64384WordPress JetFormBuilder plugin <= 3.5.3 - Broken Access Control vulnerabilityjetmonsters JetFormBuilder

CVE-2025-63078WordPress Restaurant Menu by MotoPress plugin <= 2.4.11 - Broken Access Control vulnerabilityjetmonsters Restaurant Menu by MotoPress

CVE-2025-58252WordPress Getwid Plugin <= 2.1.2 - Sensitive Data Exposure Vulnerabilityjetmonsters Getwid

CVE-2025-54038WordPress Restaurant Menu by MotoPress plugin <= 2.4.6 - Cross Site Request Forgery (CSRF) Vulnerabilityjetmonsters Restaurant Menu by MotoPress

CVE-2025-53990WordPress JetFormBuilder plugin <= 3.5.1.2 - PHP Object Injection Vulnerabilityjetmonsters JetFormBuilder

CVE-2025-49914WordPress Restaurant Menu by MotoPress plugin <= 2.4.7 - Sensitive Data Exposure vulnerabilityjetmonsters Restaurant Menu by MotoPress

CVE-2025-48258WordPress Mega Menu Block plugin <= 1.0.6 - Cross Site Scripting (XSS) Vulnerabilityjetmonsters Mega Menu Block

CVE-2025-30846WordPress Restaurant Menu by MotoPress plugin <= 2.4.4 - Local File Inclusion vulnerabilityjetmonsters Restaurant Menu by MotoPress

CVE-2025-11991JetFormBuilder <= 3.5.3 - Missing Authorization to Unauthenticated Form Generationjetmonsters JetFormBuilder — Dynamic Blocks Form Builder

CVE-2024-7291JetFormBuilder <= 3.3.4.1 - Authenticated (Administrator+) Privilege Escalationjetmonsters JetFormBuilder — Dynamic Blocks Form Builder

CVE-2024-6491Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authentication to MailChimp API key updatejetmonsters Getwid – Gutenberg Blocks

CVE-2024-6489Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authorization to Google API key updatejetmonsters Getwid – Gutenberg Blocks

CVE-2024-5611Stratum – Elementor Widgets <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widgetjetmonsters Stratum Widgets for Elementor

CVE-2024-4626JetWidgets For Elementor <= 1.0.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_type and id…jetmonsters JetWidgets For Elementor

CVE-2024-4413Hotel Booking Lite <= 4.11.1 - Unauthenticated PHP Object Injectionjetmonsters MotoPress Hotel Booking

CVE-2024-3588Getwid – Gutenberg Blocks <= 2.0.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Countdown'jetmonsters Getwid – Gutenberg Blocks

CVE-2024-3342Timetable and Event Schedule by MotoPress <= 2.4.11 - Authenticated (Contributor+) SQL Injectionjetmonsters Timetable and Event Schedule by MotoPress

CVE-2024-2507JetWidgets For Elementor <= 1.0.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Button URLjetmonsters JetWidgets For Elementor

CVE-2024-2138JetWidgets For Elementor <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box Widgetjetmonsters JetWidgets For Elementor

CVE-2024-1948Getwid – Gutenberg Blocks <= 2.0.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block Contentjetmonsters Getwid – Gutenberg Blocks

CVE-2024-13642Stratum – Elementor Widgets <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Vulnerability via Image…jetmonsters Stratum Widgets for Elementor

CVE-2024-10872Getwid – Gutenberg Blocks <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scriptingjetmonsters Getwid – Gutenberg Blocks

CVE-2024-10323JetWidgets For Elementor <= 1.0.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadjetmonsters JetWidgets For Elementor

CVE-2024-10316Stratum – Elementor Widgets <= 1.4.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor…jetmonsters Stratum Widgets for Elementor

CVE-2023-6963Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypassjetmonsters Getwid – Gutenberg Blocks

CVE-2023-6959Getwid – Gutenberg Blocks <= 2.0.4 - Missing Authorization to Recaptcha API Key Modificationjetmonsters Getwid – Gutenberg Blocks

CVE-2023-1910Getwid – Gutenberg Blocks <= 1.8.3 - Improper Authorization via get_remote_templates REST endpointjetmonsters Getwid – Gutenberg Blocks

CVE-2023-1895Getwid – Gutenberg Blocks <= 1.8.3 - Authenticated(Subscriber+) Server Side Request Forgeryjetmonsters Getwid – Gutenberg Blocks

CVE-2023-0086JetWidgets for Elementor <= 1.0.12 - Cross-Site Request Forgery to Settings Updatejetmonsters JetWidgets For Elementor

CVE-2020-36840Timetable and Event Schedule by MotoPress <= 2.3.8 - Missing Authorizationjetmonsters Timetable and Event Schedule by MotoPress

50 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.