Crocoblock. Jetimpex Inc. vulnerabilities

Published CVEs affecting Crocoblock. Jetimpex Inc. products: 21 record(s), with severity, exploitation and fixes.

JetEngine 8 JetBooking 3 JetElements For Elementor 2 JetSmartFilters 1 JetReviews 1 JetAppointment 1 JetBlog 1 JetTabs 1 JetBlocks For Elementor 1 JetSearch 1 JetTricks 1

Exploited only (KEV) →

CVE-2026-97265 Medium · 6.5 CWE-79 Sep 30, 2026

WordPress JetEngine plugin <= 3.8.15.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3.

CVE-2026-97238 Medium · 5.5 CWE-79 Sep 30, 2026

WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.

CVE-2026-97237 High · 7.1 CWE-79 Sep 30, 2026

WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.

CVE-2026-93618 Medium · 6.5 CWE-79 Sep 23, 2026

WordPress JetTricks plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimpex Inc. JetTricks allows Stored XSS. This issue affects JetTricks: from n/a through 2.0.1.

CVE-2026-66579 Medium · 6.5 CWE-79 Sep 17, 2026

WordPress JetElements For Elementor plugin <= 2.9.2.1 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.2.1 versions.

CVE-2026-66577 Medium · 6.5 CWE-79 Sep 17, 2026

WordPress JetSearch plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting (XSS) in JetSearch <= 3.6.3 versions.

CVE-2026-66576 Medium · 6.5 CWE-79 Sep 17, 2026

WordPress JetBlocks For Elementor plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting (XSS) in JetBlocks For Elementor <= 1.5.2 versions.

CVE-2026-66573 Medium · 6.5 CWE-79 Sep 17, 2026

WordPress JetTabs plugin <= 2.3.3.1 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting (XSS) in JetTabs <= 2.3.3.1 versions.

CVE-2026-66572 Medium · 6.5 CWE-79 Sep 17, 2026

WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting (XSS) in JetBlog <= 2.4.10 versions.

CVE-2026-66581 High · 7.1 CWE-79 Aug 20, 2026

WordPress JetEngine plugin <= 3.8.14.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.1 versions.

CVE-2026-66613 Critical · 9.8 CWE-1336 Aug 19, 2026

WordPress JetEngine plugin <= 3.8.14 - Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution (RCE) in JetEngine <= 3.8.14 versions.

CVE-2026-73365 Critical · 9.3 CWE-89 Aug 18, 2026

WordPress JetAppointment plugin <= 2.5.2 - SQL Injection vulnerability

Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions.

CVE-2026-28082 High · 7.1 CWE-79 Aug 6, 2026

WordPress JetEngine plugin <= 3.8.13.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.13.1 versions.

CVE-2026-65468 Medium · 5.3 CWE-862 Jul 23, 2026

WordPress JetBooking plugin <= 4.1.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions.

CVE-2026-65467 Medium · 4.9 CWE-918 Jul 23, 2026

WordPress JetEngine plugin <= 3.8.11 - Server Side Request Forgery (SSRF) vulnerability

Contributor Server Side Request Forgery (SSRF) in JetEngine <= 3.8.11 versions.

CVE-2026-65466 Medium · 4.9 CWE-918 Jul 23, 2026

WordPress JetBooking plugin <= 4.1.2 - Server Side Request Forgery (SSRF) vulnerability

Custom role Server Side Request Forgery (SSRF) in JetBooking <= 4.1.2 versions.

CVE-2026-65465 Medium · 6.5 CWE-79 Jul 23, 2026

WordPress JetElements For Elementor plugin <= 2.9.1.1 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.1.1 versions.

CVE-2026-57354 Medium · 6.5 CWE-79 Jul 2, 2026

WordPress JetReviews plugin <= 3.0.0.1 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting (XSS) in JetReviews <= 3.0.0.1 versions.

CVE-2026-56068 Critical · 9.3 CWE-89 Jun 26, 2026

JetEngine WordPress Plugin Unauthenticated SQL Injection (CVE-2026-56068)

Unauthenticated SQL Injection in JetEngine <= 3.8.10.2 versions.

CVE-2026-56067 Critical · 9.3 CWE-89 Jun 26, 2026

JetSmartFilters WordPress Plugin Unauthenticated SQL Injection (CVE-2026-56067)

Unauthenticated SQL Injection in JetSmartFilters <= 3.8.3 versions.

CVE-2026-54820 Critical · 9.3 CWE-89 Jun 26, 2026

JetBooking: Unauthenticated SQL Injection (CVE-2026-54820)

Unauthenticated SQL Injection in JetBooking <= 4.0.4.1 versions.