jkdevstudio

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

jkdevstudio records in CISA KEV

No jkdevstudio vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-02561 CVE-2025-2932 · GHSA-w8v7-vvhf-x7qw

JKDEVKIT <= 1.9.4 - Authenticated (Subscriber+) Arbitrary File Deletion

MEDIUM 42

The JKDEVKIT plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'font_upload_handler' function in all versions up to, and including, 1.9.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0083 Published 2025-07-03 No fix listed CWE-22

TI-2025-42558 CVE-2025-69104 · GHSA-96mw-wmfj-cw6g

WordPress Qreatix theme <= 1.9.4 - Cross Site Scripting (XSS) vulnerability

LOW 31

Unauthenticated Cross Site Scripting (XSS) in Qreatix <= 1.9.4 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00237 Published 2026-06-16 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0