CVE Intelligence

Jewel Theme Master Addons for Elementor Premium vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Jewel Theme Master Addons for Elementor Premium: 1 record(s), with affected versions and fixes.

CVE-2026-3132 High · 8.8 CWE-94 Mar 2, 2026
Master Addons for Elementor Premium <= 2.1.3 - Authenticated (Subscriber+) Remote Code Execution via render_preview
The Master Addons for Elementor Premium plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.1.3 via the 'JLTMA_Widget_Admin::render_preview'. This is due to missing capability check. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute code on the server.