Vulnerabilities in Crocoblock. Jetimpex Inc.
17 resultsVexday analysis
Crocoblock/Jetimpex possui 8 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, com 3 classificadas como críticas e injeção SQL (CWE-89) como fraqueza dominante. Nenhuma das vulnerabilidades está sob ataque ativo confirmado (KEV), mas o volume recente e a prevalência de falhas críticas de injeção demandam atenção prioritária em aplicações que utilizam este fornecedor.
CVE-2026-66613CRITICALWordPress JetEngine plugin <= 3.8.14 - Remote Code Execution (RCE) vulnerabilityEPSS 0.5%CVE-2026-56067CRITICALWordPress JetSmartFilters plugin <= 3.8.3 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-54820CRITICALWordPress JetBooking plugin <= 4.0.4.1 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-56068CRITICALWordPress JetEngine plugin <= 3.8.10.2 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-73365CRITICALWordPress JetAppointment plugin <= 2.5.2 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-65468MEDIUMWordPress JetBooking plugin <= 4.1.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-57354MEDIUMWordPress JetReviews plugin <= 3.0.0.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-65465MEDIUMWordPress JetElements For Elementor plugin <= 2.9.1.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-65467MEDIUMWordPress JetEngine plugin <= 3.8.11 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%CVE-2026-65466MEDIUMWordPress JetBooking plugin <= 4.1.2 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%CVE-2026-66581HIGHWordPress JetEngine plugin <= 3.8.14.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-28082HIGHWordPress JetEngine plugin <= 3.8.13.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-66572MEDIUMWordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-66576MEDIUMWordPress JetBlocks For Elementor plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-66573MEDIUMWordPress JetTabs plugin <= 2.3.3.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-66579MEDIUMWordPress JetElements For Elementor plugin <= 2.9.2.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-66577MEDIUMWordPress JetSearch plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%