Jewel Theme

10 CVEs across 3 Jewel Theme products. Browse Jewel Theme vulnerabilities, severities, and proof-of-concept exploits.

Jewel Theme products with known CVEs

Product	CVEs
Master Addons For Elementor	7
Wp Adminify	2
Master Addons For Elementor Premium	1

Jewel Theme CVEs — newest first
CVE	Severity	Score	Published	Summary
`CVE-2026-3132`	High	`8.8`	2026-03-02	The Master Addons for Elementor Premium plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.1.3 via the 'JLTMA_…
`CVE-2023-40679`	Medium	`6.5`	2025-12-24	Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This iss…
`CVE-2024-38710`	Medium	`5.9`	2024-07-20	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jewel Theme Master Addons for Elementor allows Sto…
`CVE-2024-35660`	Medium	`6.5`	2024-06-09	Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1.
`CVE-2024-35702`	Medium	`6.5`	2024-06-08	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jewel Theme Master Addons for Elementor allows Sto…
`CVE-2024-35688`	Medium	`6.5`	2024-06-08	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jewel Theme Master Addons for Elementor allows Sto…
`CVE-2024-33595`	Medium	`4.3`	2024-04-29	Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1.
`CVE-2024-29911`	Medium	`6.5`	2024-03-27	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jewel Theme Master Addons for Elementor allows Stored XSS…
`CVE-2023-52132`	High	`7.6`	2023-12-31	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jewel Theme WP Adminify.This issue affects WP Adminify: f…
`CVE-2023-44266`	Medium	`5.9`	2023-10-02	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jewel Theme WP Adminify plugin <= 3.1.6 versions.