What’s Vulnerable › Products
Crocoblock JetElements For Elementor vulnerabilities
20 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.
Check whether your Crocoblock JetElements For Elementor version is affected
Latest Crocoblock JetElements For Elementor vulnerabilities
- CVE-2026-114707 — WordPress JetElements For Elementor plugin <= 2.9.2.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2026-111414 — WordPress JetElements For Elementor plugin <= 2.9.2.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2026-107866 — WordPress JetElements For Elementor plugin <= 2.9.2.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2026-105879 — WordPress JetElements For Elementor plugin <= 2.9.2.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2026-24958 — WordPress JetElements For Elementor plugin <= 2.7.12.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2025-64355 — WordPress JetElements For Elementor plugin <= 2.7.12 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2025-49939 — WordPress JetElements For Elementor plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2025-53983 — WordPress JetElements For Elementor <= 2.7.7 - Sensitive Data Exposure Vulnerability (CVSS 6.5)
- CVE-2025-55714 — WordPress JetElements For Elementor Plugin <= 2.7.9 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- CVE-2025-53982 — WordPress JetElements For Elementor plugin <= 2.7.7 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- CVE-2025-39447 — WordPress JetElements For Elementor plugin <= 2.7.4.1 - Broken Access Control Vulnerability (CVSS 7.5)
- CVE-2025-39448 — WordPress JetElements For Elementor plugin <= 2.7.4.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2025-0371 — Jet Elements <= 2.7.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets (CVSS 5.4)
- CVE-2024-7145 — JetElements <= 2.6.20 - Authenticated (Contributor+) Arbitrary Local File Inclusion (CVSS 8.8)
- CVE-2024-7144 — JetElements <= 2.6.20 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
- CVE-2024-7291 — JetFormBuilder <= 3.3.4.1 - Authenticated (Administrator+) Privilege Escalation (CVSS 7.2)
- CVE-2023-48761 — WordPress JetElements For Elementor plugin <= 2.6.13 - Broken Access Control vulnerability (CVSS 6.3)
- CVE-2023-48760 — WordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Broken Access Control vulnerability (CVSS 9.8)
- CVE-2023-48759 — WordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Arbitrary Attachment Download vulnerability (CVSS 7.5)
- CVE-2023-39157 — WordPress JetElements For Elementor Plugin <= 2.6.10 is vulnerable to Remote Code Execution (RCE) (CVSS 8.8)