Crocoblock vulnerabilities

Products

• Jetengine 46
• Jetelements For Elementor 20
• Jetformbuilder 11
• Jetblocks For Elementor 10
• Jetsearch 9
• Jetblog 8
• Jetelements 8
• Jetsmartfilters 8
• Jettabs 8
• Jetwidgets For Elementor 8
• Jetpopup 6
• Jetreviews 5
• Jetwoobuilder 5
• Jetbooking 4
• Jettricks 4
• Jetelements For Elementor 3
• Jetmenu 3
• Jetproductgallery 2

Newest

• crocoblock jetformbuilder WordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerability CVE-2026-123860 5.3 MediumNovember 7, 2026
• crocoblock jetformbuilder – hierarchical select WordPress JetFormBuilder – Hierarchical Select plugin <= 1.0.10 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-123861 5.3 MediumNovember 7, 2026
• crocoblock jetformbuilder WordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerability CVE-2026-123483 5.3 MediumNovember 7, 2026
• crocoblock jetengine WordPress JetEngine plugin <= 3.9.0.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-123477 6.5 MediumNovember 7, 2026
• crocoblock jetformbuilder WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability CVE-2026-119481 9.8 CriticalNovember 4, 2026
• crocoblock jetformbuilder WordPress JetFormBuilder plugin <= 3.6.7.1 - Attachment Deletion Via Media-Field Preset vulnerability CVE-2026-119480 6.5 MediumNovember 1, 2026
• crocoblock jetformbuilder WordPress JetFormBuilder plugin <= 3.6.7.1 - Content Injection vulnerability CVE-2026-119479 5.3 MediumOctober 30, 2026
• crocoblock jetformbuilder WordPress JetFormBuilder plugin <= 3.6.7.1 - Broken Access Control vulnerability CVE-2026-119482 5.3 MediumOctober 30, 2026
• crocoblock jetelements for elementor WordPress JetElements For Elementor plugin <= 2.9.2.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-39737 6.5 MediumOctober 29, 2026
• crocoblock jetengine WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerability CVE-2026-39736 8.5 HighOctober 29, 2026
• crocoblock jetsmartfilters WordPress JetSmartFilters plugin <= 3.8.6.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-116857 6.5 MediumOctober 29, 2026
• crocoblock jetengine WordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerability CVE-2026-39735 6.5 MediumOctober 29, 2026
• crocoblock jetsmartfilters WordPress JetSmartFilters plugin <= 3.8.6.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-114708 6.5 MediumOctober 26, 2026
• crocoblock jetelements for elementor WordPress JetElements For Elementor plugin <= 2.9.2.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-114707 6.5 MediumOctober 26, 2026
• crocoblock jetengine WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability CVE-2026-115608 8.5 HighOctober 26, 2026
• crocoblock jetelements for elementor WordPress JetElements For Elementor plugin <= 2.9.2.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-111414 6.5 MediumOctober 19, 2026
• crocoblock jetsmartfilters WordPress JetSmartFilters plugin <= 3.8.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-110890 6.5 MediumOctober 15, 2026
• crocoblock jetengine WordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability CVE-2026-107870 7.1 HighOctober 14, 2026
• crocoblock jetproducttables WordPress JetProductTables plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-107867 7.1 HighOctober 14, 2026
• crocoblock jetformbuilder WordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerability CVE-2026-107431 7.5 HighOctober 14, 2026
• crocoblock jetmenu WordPress JetMenu plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-107865 6.5 MediumOctober 12, 2026
• crocoblock jetelements for elementor WordPress JetElements For Elementor plugin <= 2.9.2.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-107866 6.5 MediumOctober 12, 2026
• crocoblock jetreviews WordPress JetReviews plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-94667 6.5 MediumOctober 9, 2026
• crocoblock jetblog WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability CVE-2026-94661 7.1 HighOctober 9, 2026
• crocoblock jetblocks for elementor WordPress JetBlocks For Elementor plugin <= 1.5.2.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-62049 6.5 MediumOctober 9, 2026
• crocoblock jetelements for elementor WordPress JetElements For Elementor plugin <= 2.9.2.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-105879 6.5 MediumOctober 6, 2026
• crocoblock jetappointment JetAppointment <= 2.5.2.1 - Unauthenticated Stored Cross-Site Scripting via 'friendlyTime' Parameter CVE-2026-93875 7.2 HighOctober 2, 2026
• crocoblock jetengine WordPress JetEngine plugin <= 3.8.15.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-97265 6.5 MediumSeptember 30, 2026
• crocoblock jetengine WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-97238 5.5 MediumSeptember 30, 2026
• crocoblock jetengine WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-97237 7.1 HighSeptember 30, 2026
• crocoblock jettricks WordPress JetTricks plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-93618 6.5 MediumSeptember 23, 2026
• crocoblock jetelements for elementor WordPress JetElements For Elementor plugin <= 2.9.2.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-66579 6.5 MediumSeptember 17, 2026
• crocoblock jetsearch WordPress JetSearch plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-66577 6.5 MediumSeptember 17, 2026
• crocoblock jetblocks for elementor WordPress JetBlocks For Elementor plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-66576 6.5 MediumSeptember 17, 2026
• crocoblock jettabs WordPress JetTabs plugin <= 2.3.3.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-66573 6.5 MediumSeptember 17, 2026
• crocoblock jetblog WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability CVE-2026-66572 6.5 MediumSeptember 17, 2026
• crocoblock jetformbuilder WordPress JetFormBuilder plugin <= 3.6.5.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-84817 7.1 HighSeptember 8, 2026
• crocoblock jetpopup WordPress JetPopup plugin <= 2.0.20.2 - Broken Access Control vulnerability CVE-2026-27347 5.3 MediumSeptember 4, 2026
• crocoblock jetengine WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-81760 7.1 HighAugust 28, 2026
• crocoblock jetengine WordPress JetEngine plugin <= 3.8.14.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-66581 7.1 HighAugust 20, 2026
• crocoblock jetengine WordPress JetEngine plugin <= 3.8.14 - Remote Code Execution (RCE) vulnerability CVE-2026-66613 9.8 CriticalAugust 19, 2026
• crocoblock jetengine JetEngine < 3.8.14 - Author+ Stored XSS via SVG Upload CVE-2026-18202 6.8 MediumAugust 19, 2026
• crocoblock jetengine JetEngine < 3.8.13.1 - Unauthenticated Stored XSS via Form File Upload (SVG) CVE-2026-17019 6.1 MediumAugust 10, 2026
• crocoblock jetengine WordPress JetEngine plugin <= 3.8.13.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-28082 7.1 HighAugust 6, 2026
• crocoblock jetengine JetEngine < 3.8.12 - Contributor+ Stored XSS via jet_engine Shortcode CVE-2026-14864 5.4 MediumAugust 2, 2026
• crocoblock jetbooking WordPress JetBooking plugin <= 4.1.2 - Broken Access Control vulnerability CVE-2026-65468 5.3 MediumJuly 23, 2026
• crocoblock jetengine WordPress JetEngine plugin <= 3.8.11 - Server Side Request Forgery (SSRF) vulnerability CVE-2026-65467 4.9 MediumJuly 23, 2026
• crocoblock jetbooking WordPress JetBooking plugin <= 4.1.2 - Server Side Request Forgery (SSRF) vulnerability CVE-2026-65466 4.9 MediumJuly 23, 2026
• crocoblock jetelements for elementor WordPress JetElements For Elementor plugin <= 2.9.1.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-65465 6.5 MediumJuly 23, 2026
• crocoblock jetsearch WordPress JetSearch plugin <= 3.6.1.2 - Sensitive Data Exposure vulnerability CVE-2026-61977 5.3 MediumJuly 13, 2026
• Show olderLoading…