CVE-2022-3805 in Jeg Elementor Kit Plugin
Summary
by MITRE • 12/23/2022
The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various functions used to update the plugin settings in versions up to, and including, 2.5.6. Unauthenticated users can use an easily available nonce, obtained from pages edited by the plugin, to update the MailChimp API key, global styles, 404 page settings, and enabled elements.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Analysis
by VulDB Data Team • 04/09/2026
The Jeg Elementor Kit plugin for WordPress presents a critical authorization bypass vulnerability that undermines the security posture of affected installations. This vulnerability exists within the plugin's handling of administrative functions that manage core configuration parameters including MailChimp API integration, global styling options, 404 page customization, and element enablement settings. The flaw affects all versions up to and including 2.5.6, making a substantial portion of WordPress installations potentially vulnerable to unauthorized configuration changes. The vulnerability stems from the improper validation of user permissions within the plugin's administrative interfaces, allowing unauthenticated attackers to manipulate critical system parameters through crafted requests.
The technical exploitation of this vulnerability relies on the availability of a nonce value that can be obtained from pages edited by the plugin. This nonce, which should typically be validated against authenticated user sessions, is accessible without proper authorization checks to unauthenticated users. Attackers can leverage this weakness to modify sensitive plugin configurations that control email marketing integrations, visual styling elements, error page handling, and core functionality toggles. The vulnerability specifically targets the plugin's settings update mechanisms, which are designed to require administrative privileges but fail to properly verify user authentication status.
The operational impact of this authorization bypass is significant as it allows attackers to gain unauthorized control over critical plugin functionality. An attacker who successfully exploits this vulnerability could modify the MailChimp API key to redirect email marketing data to attacker-controlled services, alter global styles to inject malicious code or change branding, customize 404 error pages to redirect users to malicious sites, or enable/disable plugin elements to disrupt normal functionality. These changes can persist until manually corrected by authorized administrators, potentially causing data exfiltration, service disruption, or further attack vector establishment within the WordPress environment.
Security mitigations for this vulnerability should prioritize immediate plugin updates to versions that address the authorization bypass issue. Organizations should implement network-level controls to monitor for unusual administrative activity patterns and ensure that all WordPress installations maintain current security patches. The vulnerability aligns with CWE-863, Authorization Bypass Through User-Controlled Key, and maps to ATT&CK technique T1078.004 for Valid Accounts and T1547.001 for Registry Run Keys. Administrators should conduct thorough security audits of their WordPress installations to identify any unauthorized configuration changes and implement proper access controls for administrative interfaces. Additionally, network segmentation and monitoring solutions should be deployed to detect and prevent unauthorized administrative operations within WordPress environments.