CVE-2026-49076: WordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine jet-engine allows Blind SQL Injection.This issue affects JetEngine: from n/a through 3.8.9.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress JetEngine pluginto a version that resolves this vulnerability.Fixed in 3.8.10
Event History
Frequently Asked Questions
What is the severity of CVE-2026-49076?
CVE-2026-49076 has a critical severity rating of 9.3.
What is the nature of the vulnerability in CVE-2026-49076?
CVE-2026-49076 is an unauthenticated SQL Injection vulnerability found in the JetEngine plugin versions up to 3.8.9.1.
How do I fix CVE-2026-49076?
To mitigate CVE-2026-49076, update the JetEngine plugin to the latest version beyond 3.8.9.1.
What software is affected by CVE-2026-49076?
CVE-2026-49076 affects the Crocoblock JetEngine plugin for WordPress.
What potential impact does CVE-2026-49076 have?
CVE-2026-49076 can lead to unauthorized database access and data manipulation due to SQL Injection.