Skip to contentCrocoblock vulnerabilities
Newest
- crocoblock jettricksWordPress JetTricks <= 1.5.4.1 - Sensitive Data Exposure VulnerabilityCVE-2025-539926.5 Medium
- crocoblock jetblocks for elementorWordPress JetBlocks For Elementor <= 1.3.18 - Sensitive Data Exposure VulnerabilityCVE-2025-539886.5 Medium
- crocoblock jetpopupWordPress JetPopup plugin <= 2.0.15 - Sensitive Data Exposure vulnerabilityCVE-2025-539936.5 Medium
- crocoblock jetwoobuilderWordPress JetWooBuilder <= 2.1.20 - Sensitive Data Exposure VulnerabilityCVE-2025-539986.5 Medium
- crocoblock jetsmartfiltersWordPress JetSmartFilters <= 3.6.7 - Sensitive Data Exposure VulnerabilityCVE-2025-540086.5 Medium
- crocoblock jetproductgalleryWordPress JetProductGallery Plugin <= 2.2.0.2 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-547496.5 Medium
- crocoblock jetelements for elementorWordPress JetElements For Elementor Plugin <= 2.7.9 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-557146.5 Medium
- crocoblock jetengineWordPress JetEngine Plugin plugin <= 3.7.1.2 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-546886.5 Medium
- crocoblock jettabsWordPress JetTabs Plugin plugin <= 2.2.9.1 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-546876.5 Medium
- crocoblock jetsmartfiltersWordPress JetSmartFilters plugin <= 3.6.8 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-540096.5 Medium
- crocoblock jetsearchWordPress JetSearch plugin <= 3.5.10.1 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-539966.5 Medium
- crocoblock jetpopupWordPress JetPopup plugin <= 2.0.15.1 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-539956.5 Medium
- crocoblock jetpopupWordPress JetPopup plugin <= 2.0.15 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-539946.5 Medium
- crocoblock jettricksWordPress JetTricks plugin <= 1.5.4.1 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-539916.5 Medium
- crocoblock jetblocks for elementorWordPress JetBlocks For Elementor plugin <= 1.3.19 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-539896.5 Medium
- crocoblock jettabsWordPress JetTabs plugin <= 2.2.9 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-539846.5 Medium
- crocoblock jetelements for elementorWordPress JetElements For Elementor plugin <= 2.7.7 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-539826.5 Medium
- crocoblock jetelements for elementorWordPress JetElements For Elementor plugin <= 2.7.4.1 - Broken Access Control VulnerabilityCVE-2025-394477.5 High
- crocoblock jetwoobuilderWordPress JetWooBuilder plugin <= 2.1.18 - Broken Access Control VulnerabilityCVE-2025-394497.5 High
- crocoblock jetblocks for elementorWordPress JetBlocks For Elementor plugin <= 1.3.16 - Broken Access Control VulnerabilityCVE-2025-394517.5 High
- crocoblock jetelements for elementorWordPress JetElements For Elementor plugin <= 2.7.4.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-394486.5 Medium
- crocoblock jettabsWordPress JetTabs plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-394506.5 Medium
- crocoblock jetreviewsWordPress JetReviews plugin <= 2.3.6 - Local File Inclusion vulnerabilityCVE-2025-393967.5 High
- crocoblock jetmenuWordPress JetMenu plugin <= 2.4.9 - Broken Access Control VulnerabilityCVE-2025-269537.5 High
- crocoblock jetengineWordPress JetEngine plugin <= 3.6.4.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-268706.5 Medium
- crocoblock jetblogWordPress JetBlog plugin <= 2.4.3 - Broken Access Control VulnerabilityCVE-2025-269587.5 High
- crocoblock jetpopupWordPress JetPopup plugin <= 2.0.11 - Broken Access Control VulnerabilityCVE-2025-269447.5 High
- crocoblock jettricksWordPress JetTricks plugin <= 1.5.1 - Broken Access Control VulnerabilityCVE-2025-269427.5 High
- crocoblock jetblogWordPress JetBlog plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-267446.5 Medium
- crocoblock jetcomparewishlistWordPress JetCompareWishlist plugin <= 1.5.9 - Local File Inclusion vulnerabilityCVE-2025-222797.5 High
- crocoblock jetsmartfiltersWordPress JetSmartFilters plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-309636.5 Medium
- crocoblock jetproductgalleryWordPress JetProductGallery plugin <= 2.1.22 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-314126.5 Medium
- crocoblock jetwoobuilderWordPress JetWooBuilder plugin <= 2.1.18 - Local File Inclusion vulnerabilityCVE-2025-310167.5 High
- crocoblock jetblocks for elementorWordPress JetBlocks For Elementor plugin <= 1.3.16 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-309876.5 Medium
- crocoblock jetsearchWordPress JetSearch plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-310436.5 Medium
- crocoblock jetelementsJet Elements <= 2.7.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple WidgetsCVE-2025-03716.4 Medium
- crocoblock jetengineJet Engine <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via list_tag ParameterCVE-2025-03696.4 Medium
- crocoblock jetengineWordPress JetEngine plugin <= 3.2.4 - Broken Access Control vulnerabilityCVE-2023-487587.1 High
- crocoblock jetwidgets for elementorJetWidgets For Elementor <= 1.0.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadCVE-2024-103236.4 Medium
- crocoblock jetgridbuilderWordPress JetGridBuilder plugin <= 1.1.2 - Local File Inclusion vulnerabilityCVE-2024-432218.5 High
- crocoblock jetelementsJetElements <= 2.6.20 - Authenticated (Contributor+) Arbitrary Local File InclusionCVE-2024-71458.8 High
- crocoblock jetelementsJetElements <= 2.6.20 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-71446.4 Medium
- crocoblock jettabs, jettabs for elementor +1 moreJetTabs <= 2.2.3 - Authenticated (Contributor+) Arbitrary Local File InclusionCVE-2024-71468.8 High
- crocoblock jetsearchJetSearch <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-71366.4 Medium
- crocoblock jetblocks for elementorJetBlocks <= 1.3.12 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-71476.4 Medium
- crocoblock jetelements, jetmonsters jetformbuilder — dynamic blocks form builder +1 moreJetFormBuilder <= 3.3.4.1 - Authenticated (Administrator+) Privilege EscalationCVE-2024-72917.2 High
- crocoblock jetwidgets for elementor and woocommerce, jetwidgets for elementor +1 moreWordPress JetWidgets for Elementor and WooCommerce plugin <= 1.1.7 - Contributor+ Limited Local File Inclusion vulnerabilityCVE-2024-387726.5 Medium
- crocoblock jetthemecoreWordPress JetThemeCore plugin < 2.2.1 - Subscriber+ Arbitrary File Deletion vulnerabilityCVE-2024-374977.7 High
- crocoblock jetwidgets for elementorJetWidgets For Elementor <= 1.0.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_type and id ParametersCVE-2024-46266.4 Medium
- crocoblock jetelements, jetelements for elementor +1 moreWordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Arbitrary Attachment Download vulnerabilityCVE-2023-487597.5 High
- Show moreLoading…