Skip to contentCrocoblock vulnerabilities
Newest
- crocoblock jetelements, jetelements for elementor +1 moreWordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Broken Access Control vulnerabilityCVE-2023-487608.2 High
- crocoblock jetelements, jetelements for elementor +1 moreWordPress JetElements For Elementor plugin <= 2.6.13 - Broken Access Control vulnerabilityCVE-2023-487616.3 Medium
- crocoblock jetengineWordPress JetEngine plugin <= 3.2.4 - Privilege Escalation vulnerabilityCVE-2023-487578.8 High
- crocoblock jetformbuilderWordPress JetFormBuilder plugin <= 3.0.8 - Authenticated Privilege Escalation vulnerabilityCVE-2023-378667.2 High
- crocoblock jetformbuilderWordPress JetFormBuilder plugin <= 3.1.4 - Content Injection vulnerabilityCVE-2023-487635.3 Medium
- crocoblock jetwidgets for elementorJetWidgets For Elementor <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box WidgetCVE-2024-21386.4 Medium
- crocoblock jetwidgets for elementorJetWidgets For Elementor <= 1.0.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Button URLCVE-2024-25076.4 Medium
- crocoblock jetelements, jetelements for elementor +1 moreWordPress JetElements For Elementor Plugin <= 2.6.10 is vulnerable to Remote Code Execution (RCE)CVE-2023-391579.0 Critical
- crocoblock jetelements for elementorWordPress JetElements For Elementor Plugin <= 2.6.13 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-487626.3 Medium
- crocoblock jetblocks for elementorWordPress JetBlocks For Elementor Plugin <= 1.3.8 is vulnerable to Cross Site Scripting (XSS)CVE-2023-487567.1 High
- crocoblock jetformbuilder, jetformbuilder — dynamic blocks form builder +1 moreWordPress JetFormBuilder Plugin <= 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-332124.3 Medium
- crocoblock jetengine, jetengine for elementor +1 moreJetEngine < 3.1.3.1 - Author+ Remote Code ExecutionCVE-2023-14068.8 High
- crocoblock jetwidgets for elementorJetWidgets For Elementor < 1.0.14 - Contributor+ Stored XSS via ShortcodeCVE-2023-00345.4 Medium
- crocoblock jetwidgets for elementorJetWidgets for Elementor <= 1.0.12 - Cross-Site Request Forgery to Settings UpdateCVE-2023-00865.4 Medium
- crocoblock jetengineCrocoblock JetEngine before 2.9.1 does not properly validate and sanitize form data.CVE-2021-418449.8 Critical
- crocoblock jetengineCrocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input.CVE-2021-386075.4 Medium
- crocoblock jetwidgets for elementorJetWidgets For Elementor < 1.0.9 - Contributor+ Stored XSSCVE-2021-242685.4 Medium