JetEngine
Crocoblock · 20 CVEs
WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability
Aug 28, 2026
WordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerability
Jun 17, 2026
JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint
Jun 17, 2026
WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerability
May 25, 2026
JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' Parameter
Apr 14, 2026
JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' Parameter
Mar 24, 2026
WordPress JetEngine plugin < 3.8.4.1 - Deserialization of untrusted data vulnerability
Mar 13, 2026
WordPress JetEngine plugin <= 3.7.2 - Remote Code Execution (RCE) vulnerability
Mar 5, 2026
WordPress JetEngine plugin <= 3.8.0 - Reflected Cross Site Scripting (XSS) vulnerability
Feb 20, 2026
WordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerability
Jan 22, 2026
WordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerability
Jan 7, 2026
WordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerability
Oct 22, 2025
WordPress JetEngine <= 3.7.0 - Remote Code Execution (RCE) Vulnerability
Aug 20, 2025
WordPress JetEngine plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability
Aug 20, 2025
WordPress JetEngine <= 3.7.0 - Sensitive Data Exposure Vulnerability
Aug 20, 2025
WordPress JetEngine Plugin plugin <= 3.7.1.2 - Cross Site Scripting (XSS) Vulnerability
Aug 14, 2025
WordPress JetEngine plugin <= 3.6.4.1 - Cross Site Scripting (XSS) vulnerability
Apr 15, 2025
Jet Engine <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via list_tag Parameter
Jan 18, 2025
WordPress JetEngine plugin <= 3.2.4 - Broken Access Control vulnerability
Jan 2, 2025
WordPress JetEngine plugin <= 3.2.4 - Privilege Escalation vulnerability
May 17, 2024
Crocoblock JetEngine before 2.9.1 does not properly validate and sanitize form data.
Dec 15, 2021
Crocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input.
Aug 16, 2021
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-81760 | WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability | HIGH | 0.25% | Aug 28, 2026 |
| CVE-2026-49076 | WordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerability | CRITICAL | 0.40% | Jun 17, 2026 |
| CVE-2026-12360 | JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint | HIGH | 0.32% | Jun 17, 2026 |
| CVE-2026-42774 | WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerability | CRITICAL | 0.40% | May 25, 2026 |
| CVE-2026-4352 | JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' Parameter | HIGH | 0.46% | Apr 14, 2026 |
| CVE-2026-4662 | JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' Parameter | HIGH | 0.54% | Mar 24, 2026 |
| CVE-2026-32355 | WordPress JetEngine plugin < 3.8.4.1 - Deserialization of untrusted data vulnerability | HIGH | 0.52% | Mar 13, 2026 |
| CVE-2026-28134 | WordPress JetEngine plugin <= 3.7.2 - Remote Code Execution (RCE) vulnerability | HIGH | 0.40% | Mar 5, 2026 |
| CVE-2025-68495 | WordPress JetEngine plugin <= 3.8.0 - Reflected Cross Site Scripting (XSS) vulnerability | HIGH | 0.19% | Feb 20, 2026 |
| CVE-2025-67923 | WordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerability | HIGH | 0.29% | Jan 22, 2026 |
| CVE-2025-69333 | WordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerability | MEDIUM | 0.19% | Jan 7, 2026 |
| CVE-2025-49938 | WordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 0.22% | Oct 22, 2025 |
| CVE-2025-53194 | WordPress JetEngine <= 3.7.0 - Remote Code Execution (RCE) Vulnerability | HIGH | 0.38% | Aug 20, 2025 |
| CVE-2025-53195 | WordPress JetEngine plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability | MEDIUM | 0.27% | Aug 20, 2025 |
| CVE-2025-53196 | WordPress JetEngine <= 3.7.0 - Sensitive Data Exposure Vulnerability | MEDIUM | 0.50% | Aug 20, 2025 |
| CVE-2025-54688 | WordPress JetEngine Plugin plugin <= 3.7.1.2 - Cross Site Scripting (XSS) Vulnerability | MEDIUM | 0.22% | Aug 14, 2025 |
| CVE-2025-26870 | WordPress JetEngine plugin <= 3.6.4.1 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 0.27% | Apr 15, 2025 |
| CVE-2025-0369 | Jet Engine <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via list_tag Parameter | MEDIUM | 0.33% | Jan 18, 2025 |
| CVE-2023-48758 | WordPress JetEngine plugin <= 3.2.4 - Broken Access Control vulnerability | HIGH | 0.31% | Jan 2, 2025 |
| CVE-2023-48757 | WordPress JetEngine plugin <= 3.2.4 - Privilege Escalation vulnerability | HIGH | 0.55% | May 17, 2024 |
| CVE-2021-41844 | Crocoblock JetEngine before 2.9.1 does not properly validate and sanitize form data. | CRITICAL | 1.05% | Dec 15, 2021 |
| CVE-2021-38607 | Crocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input. | MEDIUM | 0.60% | Aug 16, 2021 |
Showing 1 to 20 of 20 CVEs