Vulnerabilidades do Crocoblock JetReviews

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Crocoblock JetReviews: 3 registro(s), com versões afetadas e correções.

CVE-2026-94667 Média · 6.5 CWE-79 09/10/2026

WordPress JetReviews plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetReviews jet-reviews allows Stored XSS.This issue affects JetReviews: from n/a through 3.1.2.

CVE-2026-61975 Média · 5.3 CWE-497 13/07/2026

WordPress JetReviews plugin <= 3.0.1 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetReviews jet-reviews allows Retrieve Embedded Sensitive Data.This issue affects JetReviews: from n/a through <= 3.0.1.

CVE-2025-49921 Alta · 7.5 CWE-98 22/10/2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File...

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Crocoblock JetReviews jet-reviews allows PHP Local File Inclusion.This issue affects JetReviews: from n/a through <= 3.0.0.