Where
-Infinity
0

Crocoblock JetEngineJetEngine < 3.8.12 - Contributor+ Stored XSS via jet_engine Shortcode

Risk 34
Severity
5.4
First published (updated )

Crocoblock JetFormBuilderWordPress JetFormBuilder plugin <= 3.6.1 - Privilege Escalation vulnerability

Risk 52
Severity
6.8
First published (updated )

Crocoblock JetEngineWordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )

Crocoblock JetEngineWordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )

Crocoblock JetEngineWordPress JetEngine plugin <= 3.8.10 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Crocoblock JetEngine (WordPress plugin)WordPress JetEngine plugin < 3.8.9.1 - SQL Injection vulnerability

Risk 61
Severity
9.3
First published (updated )

Crocoblock JetEngineWordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerability

Risk 61
Severity
9.3
First published (updated )

Crocoblock JetEngine (WordPress plugin)WordPress JetEngine plugin <= 3.8.9.1 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
First published (updated )

Crocoblock JetEngineWordPress JetEngine plugin <= 3.8.9.1 - Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )

Crocoblock JetEngineJetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint

Risk 43
Severity
7.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Crocoblock JetEngineWordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerability

Risk 61
Severity
9.3
First published (updated )

Crocoblock JetEngineJetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' Parameter

Risk 43
Severity
7.5
First published (updated )

Crocoblock JetEngineJetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' Parameter

Risk 31
Severity
7.5
EPSS
0.10%
First published (updated )

Crocoblock JetEngineWordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerability

Risk 22
Severity
4.3
First published (updated )

Crocoblock JetTabsWordPress JetTabs plugin <= 2.2.12 - Broken Access Control vulnerability

Risk 38
Severity
6.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Crocoblock JetTabsWordPress JetTabs plugin <= 2.2.12 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
First published (updated )

Crocoblock JetPopupWordPress JetPopup plugin <= 2.0.20.1 - Insecure Direct Object References (IDOR) vulnerability

Risk 22
Severity
4.3
First published (updated )

Crocoblock JetBlogWordPress JetBlog plugin <= 2.4.7 - Broken Access Control vulnerability

Risk 38
Severity
6.5
First published (updated )

Crocoblock JetSearchWordPress JetSearch plugin <= 3.5.16 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
First published (updated )

Crocoblock JetElements For ElementorWordPress JetElements For Elementor plugin <= 2.7.12 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Crocoblock JetElements For ElementorWordPress JetElements For Elementor plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
First published (updated )

Crocoblock JetEngineWordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
First published (updated )

Crocoblock JetBlog (WordPress plugin)WordPress JetBlog plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
First published (updated )

Crocoblock JetSearchWordPress JetSearch plugin <= 3.5.10 - SQL Injection vulnerability

Risk 61
Severity
9.3
First published (updated )

Crocoblock WordPress JetBlog pluginWordPress JetBlog plugin <= 2.4.4.1 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Crocoblock JetSearchWordPress JetSearch plugin <= 3.5.10 - Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )

Crocoblock JetBlocks For ElementorWordPress JetBlocks For Elementor plugin <= 1.3.18 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
First published (updated )

Crocoblock JetReviewsWordPress JetReviews plugin <= 3.0.0 - Local File Inclusion vulnerability

Risk 70
Severity
7.5
First published (updated )

Crocoblock JetEngineWordPress JetEngine <= 3.7.0 - Remote Code Execution (RCE) Vulnerability

Risk 73
Severity
8.5
First published (updated )

Crocoblock JetEngine (WordPress plugin)WordPress JetEngine plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability

Risk 46
Severity
6.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203