What’s Vulnerable › Products
Crocoblock JetEngine vulnerabilities
24 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 20 published in the last 12 months.
Check whether your Crocoblock JetEngine version is affected
Latest Crocoblock JetEngine vulnerabilities
- CVE-2026-115608 — WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability (CVSS 8.5)
- CVE-2026-107870 — WordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-97237 — WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-81760 — WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-49076 — WordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerability (CVSS 9.3)
- CVE-2026-12360 — JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint (CVSS 7.5)
- CVE-2026-42774 — WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerability (CVSS 9.3)
- CVE-2026-4352 — JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' Parameter (CVSS 7.5)
- CVE-2026-4662 — JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' Parameter (CVSS 7.5)
- CVE-2026-32355 — WordPress JetEngine plugin < 3.8.4.1 - Deserialization of untrusted data vulnerability (CVSS 8.8)
- CVE-2026-28134 — WordPress JetEngine plugin <= 3.7.2 - Remote Code Execution (RCE) vulnerability (CVSS 8.5)
- CVE-2025-68495 — WordPress JetEngine plugin <= 3.8.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2025-67923 — WordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2025-69333 — WordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2025-49938 — WordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2025-53196 — WordPress JetEngine <= 3.7.0 - Sensitive Data Exposure Vulnerability (CVSS 6.5)
- CVE-2025-53195 — WordPress JetEngine plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- CVE-2025-53194 — WordPress JetEngine <= 3.7.0 - Remote Code Execution (RCE) Vulnerability (CVSS 8.5)
- CVE-2025-54688 — WordPress JetEngine Plugin plugin <= 3.7.1.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- CVE-2025-26870 — WordPress JetEngine plugin <= 3.6.4.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2025-0369 — Jet Engine <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via list_tag Parameter (CVSS 6.4)
- CVE-2023-48758 — WordPress JetEngine plugin <= 3.2.4 - Broken Access Control vulnerability (CVSS 7.1)
- CVE-2023-48757 — WordPress JetEngine plugin <= 3.2.4 - Privilege Escalation vulnerability (CVSS 8.8)
- CVE-2021-41844 — (CVSS 9.8)
- CVE-2021-38607 — (CVSS 5.4)