Skip to contentCrocoblock vulnerabilities
Newest
- crocoblock jetblocks for elementorWordPress JetBlocks For Elementor plugin <= 1.5.0 - Sensitive Data Exposure vulnerabilityCVE-2026-619765.3 Medium
- crocoblock jetreviewsWordPress JetReviews plugin <= 3.0.1 - Sensitive Data Exposure vulnerabilityCVE-2026-619755.3 Medium
- crocoblock jetreviewsWordPress JetReviews plugin <= 3.0.0.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-573546.5 Medium
- crocoblock jetengineWordPress JetEngine plugin <= 3.8.10.2 - SQL Injection vulnerabilityCVE-2026-560689.3 Critical
- crocoblock jetsmartfiltersWordPress JetSmartFilters plugin <= 3.8.3 - SQL Injection vulnerabilityCVE-2026-560679.3 Critical
- crocoblock jetbookingWordPress JetBooking plugin <= 4.0.4.1 - SQL Injection vulnerabilityCVE-2026-548209.3 Critical
- crocoblock jetengineWordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-541897.1 High
- crocoblock jetengineWordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-541887.1 High
- crocoblock jetengineWordPress JetEngine plugin <= 3.8.10.1 - SQL Injection vulnerabilityCVE-2026-541879.3 Critical
- crocoblock jetengineWordPress JetEngine plugin <= 3.8.10 - PHP Object Injection vulnerabilityCVE-2026-527069.8 Critical
- crocoblock jetblogWordPress JetBlog plugin <= 2.4.8 - Sensitive Data Exposure vulnerabilityCVE-2026-526967.5 High
- crocoblock jetengineWordPress JetEngine plugin < 3.8.9.1 - SQL Injection vulnerabilityCVE-2026-490849.3 Critical
- crocoblock jetsearchWordPress JetSearch plugin <= 3.5.17 - SQL Injection vulnerabilityCVE-2026-49079Public exploit9.3 Critical
- crocoblock jetengineWordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerabilityCVE-2026-490769.3 Critical
- crocoblock jetengineWordPress JetEngine plugin <= 3.8.9.1 - PHP Object Injection vulnerabilityCVE-2026-490759.8 Critical
- crocoblock jetengineWordPress JetEngine plugin <= 3.8.9.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-490747.1 High
- crocoblock jetsmartfiltersWordPress JetSmartFilters plugin <= 3.8.1 - SQL Injection vulnerabilityCVE-2026-488759.3 Critical
- crocoblock jetengineJetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX EndpointCVE-2026-123607.5 High
- crocoblock jetengineWordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerabilityCVE-2026-427749.3 Critical
- crocoblock jetengineJetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' ParameterCVE-2026-43527.5 High
- crocoblock jetengineJetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' ParameterCVE-2026-46627.5 High
- crocoblock jetengineWordPress JetEngine plugin < 3.8.4.1 - Deserialization of untrusted data vulnerabilityCVE-2026-323558.8 High
- crocoblock jetbookingJetBooking <= 4.0.3 - Unauthenticated SQL Injection via 'check_in_date' ParameterCVE-2026-34967.5 High
- crocoblock jetengineWordPress JetEngine plugin <= 3.7.2 - Remote Code Execution (RCE) vulnerabilityCVE-2026-28134Public exploit8.5 High
- crocoblock jetengineWordPress JetEngine plugin <= 3.8.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-684957.1 High
- crocoblock jetelements for elementorWordPress JetElements For Elementor plugin <= 2.7.12.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-249586.5 Medium
- crocoblock jetengineWordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-67923Public exploit7.1 High
- crocoblock jetengineWordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerabilityCVE-2025-693334.3 Medium
- crocoblock jettabsWordPress JetTabs plugin <= 2.2.12 - Broken Access Control vulnerabilityCVE-2025-684986.5 Medium
- crocoblock jettabsWordPress JetTabs plugin <= 2.2.12 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-684996.5 Medium
- crocoblock jetpopupWordPress JetPopup plugin <= 2.0.20.1 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2025-685024.3 Medium
- crocoblock jetblogWordPress JetBlog plugin <= 2.4.7 - Broken Access Control vulnerabilityCVE-2025-685036.5 Medium
- crocoblock jetsearchWordPress JetSearch plugin <= 3.5.16 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-685046.5 Medium
- crocoblock jetelements for elementorWordPress JetElements For Elementor plugin <= 2.7.12 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-643556.5 Medium
- crocoblock jetelements for elementorWordPress JetElements For Elementor plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-499396.5 Medium
- crocoblock jetengineWordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-499386.5 Medium
- crocoblock jetblocks for elementorWordPress JetBlocks For Elementor plugin <= 1.3.18 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-499346.5 Medium
- crocoblock jetblogWordPress JetBlog plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-499336.5 Medium
- crocoblock jetblogWordPress JetBlog plugin <= 2.4.4.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-499326.5 Medium
- crocoblock jetsearchWordPress JetSearch plugin <= 3.5.10 - SQL Injection vulnerabilityCVE-2025-499319.3 Critical
- crocoblock jetsearchWordPress JetSearch plugin <= 3.5.10 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-499307.1 High
- crocoblock jetwoobuilderWordPress JetWooBuilder plugin <= 2.1.20 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-499286.5 Medium
- crocoblock jetwoobuilderWordPress JetWooBuilder plugin <= 2.1.20.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-499276.5 Medium
- crocoblock jetreviewsWordPress JetReviews plugin <= 3.0.0 - Local File Inclusion vulnerabilityCVE-2025-499217.5 High
- crocoblock jetengineWordPress JetEngine plugin <= 3.7.0 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-531956.5 Medium
- crocoblock jetengineWordPress JetEngine <= 3.7.0 - Remote Code Execution (RCE) VulnerabilityCVE-2025-531948.5 High
- crocoblock jetengineWordPress JetEngine <= 3.7.0 - Sensitive Data Exposure VulnerabilityCVE-2025-531966.5 Medium
- crocoblock jetelements for elementorWordPress JetElements For Elementor <= 2.7.7 - Sensitive Data Exposure VulnerabilityCVE-2025-539836.5 Medium
- crocoblock jetmenuWordPress JetMenu <= 2.4.11.1 - Sensitive Data Exposure VulnerabilityCVE-2025-539876.5 Medium
- crocoblock jettabsWordPress JetTabs <= 2.2.9 - Sensitive Data Exposure VulnerabilityCVE-2025-539856.5 Medium
- Show moreLoading…