Crocoblock JetSearch vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Crocoblock JetSearch: 4 record(s), with affected versions and fixes.

CVE-2026-61977 Medium · 5.3 CWE-497 Jul 13, 2026

WordPress JetSearch plugin <= 3.6.1.2 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetSearch jet-search allows Retrieve Embedded Sensitive Data.This issue affects JetSearch: from n/a through <= 3.6.1.2.

CVE-2025-68504 Medium · 6.5 CWE-79 Dec 29, 2025

WordPress JetSearch plugin <= 3.5.16 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSearch jet-search allows DOM-Based XSS.This issue affects JetSearch: from n/a through <= 3.5.16.

CVE-2025-49931 Critical · 9.3 CWE-89 Oct 22, 2025

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetSearch jet-search allows Blind SQL Injection.This issue affects JetSearch: from n/a through <= 3.5.10.

CVE-2025-49930 High · 7.1 CWE-79 Oct 22, 2025

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSearch jet-search allows Reflected XSS.This issue affects JetSearch: from n/a through <= 3.5.10.