CVE-2022-3794

The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various AJAX actions in versions up to, and including, 2.5.6. Authenticated users can use an easily available nonce value to create header templates and make additional changes to the site, as the plugin does not use capability checks for this purpose.

• CWE-639

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2811758%40jeg-elementor-kit%2Ftrunk&old=2810568%40jeg-elementor-kit%2Ftrunk&sfp_email=&sfph_mail=Exploit, Third Party Advisory
• https://wordpress.org/plugins/jeg-elementor-kit/#developersProduct, Release Notes, Third Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/84b616fa-ff64-49e8-8c4a-7d7bfdf758be?source=cve
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2811758%40jeg-elementor-kit%2Ftrunk&old=2810568%40jeg-elementor-kit%2Ftrunk&sfp_email=&sfph_mail=Exploit, Third Party Advisory
• https://wordpress.org/plugins/jeg-elementor-kit/#developersProduct, Release Notes, Third Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/84b616fa-ff64-49e8-8c4a-7d7bfdf758beThird Party Advisory

Published

Dec 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-37934A potential security vulnerability has been identified in HP…7.5
• CVE-2022-37935HPE OneView for VMware vCenter, in certain circumstances, ma…5.5
• CVE-2022-37936Unauthenticated Java deserialization vulnerability in Servic…9.8
• CVE-2022-37937Pre-auth memory corruption in HPE Serviceguard9.8
• CVE-2022-37938Unauthenticated server side request forgery in HPE Servicegu…9.8
• CVE-2022-37939A potential security vulnerability has been identified in HP…5.5
• CVE-2022-37940Potential security vulnerabilities have been identified in t…6.1
• CVE-2022-37941Rejected reason: Not used in 2022
• CVE-2022-37942Rejected reason: Not used in 2022
• CVE-2022-37943Rejected reason: Not used in 2022
• CVE-2022-37944Rejected reason: Not used in 2022
• CVE-2022-37945Rejected reason: Not used in 2022