CVE Intelligence

Jetimpex Inc. vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Jetimpex Inc. products: 10 record(s), with severity, exploitation and fixes.

JetEngine 7JetSmartFilters 1JetSearch 1JetBlog 1

Exploited only (KEV) →

CVE-2026-54189 High · 7.1 CWE-79 Jun 17, 2026
WordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions.
CVE-2026-54188 High · 7.1 CWE-79 Jun 17, 2026
WordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions.
CVE-2026-54187 Critical · 9.3 CWE-89 Jun 17, 2026
WordPress JetEngine plugin <= 3.8.10.1 - SQL Injection vulnerability
Unauthenticated SQL Injection in JetEngine <= 3.8.10.1 versions.
CVE-2026-52706 Critical · 9.8 CWE-502 Jun 17, 2026
WordPress JetEngine plugin <= 3.8.10 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in JetEngine <= 3.8.10 versions.
CVE-2026-52696 High · 7.5 CWE-1258 Jun 17, 2026
WordPress JetBlog plugin <= 2.4.8 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in JetBlog <= 2.4.8 versions.
CVE-2026-49084 Critical · 9.3 CWE-89 Jun 17, 2026
WordPress JetEngine plugin < 3.8.9.1 - SQL Injection vulnerability
Unauthenticated SQL Injection in JetEngine < 3.8.9.1 versions.
CVE-2026-49079 Critical · 9.3 CWE-89 Jun 17, 2026
WordPress JetSearch plugin <= 3.5.17 - SQL Injection vulnerability
Unauthenticated SQL Injection in JetSearch <= 3.5.17 versions.
CVE-2026-49075 Critical · 9.8 CWE-502 Jun 17, 2026
WordPress JetEngine plugin <= 3.8.9.1 - PHP Object Injection vulnerability
Contributor PHP Object Injection in JetEngine <= 3.8.9.1 versions.
CVE-2026-49074 High · 7.1 CWE-79 Jun 17, 2026
WordPress JetEngine plugin <= 3.8.9.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.9.1 versions.
CVE-2026-48875 Critical · 9.3 CWE-89 Jun 17, 2026
WordPress JetSmartFilters plugin <= 3.8.1 - SQL Injection vulnerability
Unauthenticated SQL Injection in JetSmartFilters <= 3.8.1 versions.