CVE-2026-42774: WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerability
Published May 25, 2026
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine allows SQL Injection.
This issue affects JetEngine: from n/a through 3.8.8.1.
Affected Software
1 affected component
Crocoblock JetEngine<=3.8.8.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress JetEngine pluginto a version that resolves this vulnerability.Fixed in 3.8.8.2
Event History
May 25, 2026
CVE Published
via MITRE·10:34 PM
Data Sourced
via MITRE·10:34 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-42774?
CVE-2026-42774 has a critical severity rating of 9.3.
2
How do I fix CVE-2026-42774?
To fix CVE-2026-42774, update the WordPress JetEngine plugin to at least version 3.8.8.2.
3
What type of vulnerability is CVE-2026-42774?
CVE-2026-42774 is an SQL Injection vulnerability.
4
Which versions of JetEngine are affected by CVE-2026-42774?
CVE-2026-42774 affects all versions of JetEngine from n/a up to 3.8.8.1.
5
What does the CVE-2026-42774 vulnerability allow attackers to do?
CVE-2026-42774 allows attackers to perform SQL Injection attacks via the JetEngine plugin.