Crocoblock. Jetimpex Inc. JetEngine vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Crocoblock. Jetimpex Inc. JetEngine: 8 record(s), with affected versions and fixes.
CVE-2026-97265
Medium · 6.5
CWE-79 Sep 30, 2026
WordPress JetEngine plugin <= 3.8.15.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS.
This issue affects JetEngine: from n/a through 3.8.15.3.
CVE-2026-97238
Medium · 5.5
CWE-79 Sep 30, 2026
WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.
CVE-2026-97237
High · 7.1
CWE-79 Sep 30, 2026
WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.
CVE-2026-66581
High · 7.1
CWE-79 Aug 20, 2026
WordPress JetEngine plugin <= 3.8.14.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.1 versions.
CVE-2026-66613
Critical · 9.8
CWE-1336 Aug 19, 2026
WordPress JetEngine plugin <= 3.8.14 - Remote Code Execution (RCE) vulnerability
Unauthenticated Remote Code Execution (RCE) in JetEngine <= 3.8.14 versions.
CVE-2026-28082
High · 7.1
CWE-79 Aug 6, 2026
WordPress JetEngine plugin <= 3.8.13.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.13.1 versions.
CVE-2026-65467
Medium · 4.9
CWE-918 Jul 23, 2026
WordPress JetEngine plugin <= 3.8.11 - Server Side Request Forgery (SSRF) vulnerability
Contributor Server Side Request Forgery (SSRF) in JetEngine <= 3.8.11 versions.
CVE-2026-56068
Critical · 9.3
CWE-89 Jun 26, 2026
JetEngine WordPress Plugin Unauthenticated SQL Injection (CVE-2026-56068)
Unauthenticated SQL Injection in JetEngine <= 3.8.10.2 versions.