Skip to content
Crocoblock Jetengine vulnerabilities
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.9.0.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-123477
6.5 Medium
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerability
CVE-2026-39736
8.5 High
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerability
CVE-2026-39735
6.5 Medium
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability
CVE-2026-115608
8.5 High
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability
CVE-2026-107870
7.1 High
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.8.15.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-97265
6.5 Medium
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-97238
5.5 Medium
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-97237
7.1 High
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-81760
7.1 High
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.8.14.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66581
7.1 High
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.8.14 - Remote Code Execution (RCE) vulnerability
CVE-2026-66613
9.8 Critical
-
crocoblock jetengine
JetEngine < 3.8.14 - Author+ Stored XSS via SVG Upload
CVE-2026-18202
6.8 Medium
-
crocoblock jetengine
JetEngine < 3.8.13.1 - Unauthenticated Stored XSS via Form File Upload (SVG)
CVE-2026-17019
6.1 Medium
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.8.13.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28082
7.1 High
-
crocoblock jetengine
JetEngine < 3.8.12 - Contributor+ Stored XSS via jet_engine Shortcode
CVE-2026-14864
5.4 Medium
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.8.11 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-65467
4.9 Medium
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.8.10.2 - SQL Injection vulnerability
CVE-2026-56068
9.3 Critical
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-54189
7.1 High
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-54188
7.1 High
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.8.10.1 - SQL Injection vulnerability
CVE-2026-54187
9.3 Critical
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.8.10 - PHP Object Injection vulnerability
CVE-2026-52706
9.8 Critical
-
crocoblock jetengine
WordPress JetEngine plugin < 3.8.9.1 - SQL Injection vulnerability
CVE-2026-49084
9.3 Critical
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerability
CVE-2026-49076
9.3 Critical
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.8.9.1 - PHP Object Injection vulnerability
CVE-2026-49075
9.8 Critical
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.8.9.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-49074
7.1 High
-
crocoblock jetengine
JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint
CVE-2026-12360
7.5 High
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerability
CVE-2026-42774
9.3 Critical
-
crocoblock jetengine
JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' Parameter
CVE-2026-4352
7.5 High
-
crocoblock jetengine
JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' Parameter
CVE-2026-4662
7.5 High
-
crocoblock jetengine
WordPress JetEngine plugin < 3.8.4.1 - Deserialization of untrusted data vulnerability
CVE-2026-32355
8.8 High
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.7.2 - Remote Code Execution (RCE) vulnerability
CVE-2026-28134
Public exploit
8.5 High
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.8.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-68495
7.1 High
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67923
Public exploit
7.1 High
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerability
CVE-2025-69333
4.3 Medium
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49938
6.5 Medium
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-53195
6.5 Medium
-
crocoblock jetengine
WordPress JetEngine <= 3.7.0 - Remote Code Execution (RCE) Vulnerability
CVE-2025-53194
8.5 High
-
crocoblock jetengine
WordPress JetEngine <= 3.7.0 - Sensitive Data Exposure Vulnerability
CVE-2025-53196
6.5 Medium
-
crocoblock jetengine
WordPress JetEngine Plugin plugin <= 3.7.1.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-54688
6.5 Medium
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.6.4.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-26870
6.5 Medium
-
crocoblock jetengine
Jet Engine <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via list_tag Parameter
CVE-2025-0369
6.4 Medium
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.2.4 - Broken Access Control vulnerability
CVE-2023-48758
7.1 High
-
crocoblock jetengine
WordPress JetEngine plugin <= 3.2.4 - Privilege Escalation vulnerability
CVE-2023-48757
8.8 High
-
crocoblock jetengine, jetengine for elementor +1 more
JetEngine < 3.1.3.1 - Author+ Remote Code Execution
CVE-2023-1406
8.8 High
-
crocoblock jetengine
Crocoblock JetEngine before 2.9.1 does not properly validate and sanitize form data.
CVE-2021-41844
9.8 Critical
-
crocoblock jetengine
Crocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input.
CVE-2021-38607
5.4 Medium