Vulnerabilities in Crocoblock

95 results
Vexday analysis

Com 89 CVEs catalogadas e nenhuma entrada no catálogo CISA KEV, o perfil de risco ativo do Crocoblock situa-se abaixo da média geral do catálogo, sem registros de exploração confirmada no momento. O tipo de falha mais recorrente é CWE-79 (Cross-Site Scripting), padrão comum em ecossistemas de plugins web e que frequentemente serve de vetor para encadeamento com outras vulnerabilidades. A CVE mais perigosa identificada atualmente é CVE-2024-7146, com escore EPSS de 0,0096, indicando baixa probabilidade de exploração ativa no curto prazo, embora a existência de 3 CVEs críticas e 3 vulnerabilidades surgidas nos últimos 90 dias sinalize que o volume de descobertas recentes merece acompanhamento contínuo. A ausência de PoCs públicas conhecidas reduz, por ora, a superfície de exploração imediata, mas não substitui a necessidade de priorizar a aplicação de correções nas falhas críticas.

CVE-2025-49930HIGHWordPress JetSearch plugin <= 3.5.10 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-68498MEDIUMWordPress JetTabs plugin <= 2.2.12 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2023-48762MEDIUMWordPress JetElements For Elementor Plugin <= 2.6.13 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2025-49938MEDIUMWordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-49939MEDIUMWordPress JetElements For Elementor plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-49928MEDIUMWordPress JetWooBuilder plugin <= 2.1.20 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-49933MEDIUMWordPress JetBlog plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-49932MEDIUMWordPress JetBlog plugin <= 2.4.4.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-49934MEDIUMWordPress JetBlocks For Elementor plugin <= 1.3.18 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-49927MEDIUMWordPress JetWooBuilder plugin <= 2.1.20.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-54687MEDIUMWordPress JetTabs Plugin plugin <= 2.2.9.1 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-54688MEDIUMWordPress JetEngine Plugin plugin <= 3.7.1.2 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-26744MEDIUMWordPress JetBlog plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-39448MEDIUMWordPress JetElements For Elementor plugin <= 2.7.4.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-53994MEDIUMWordPress JetPopup plugin <= 2.0.15 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-53982MEDIUMWordPress JetElements For Elementor plugin <= 2.7.7 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-53989MEDIUMWordPress JetBlocks For Elementor plugin <= 1.3.19 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-68504MEDIUMWordPress JetSearch plugin <= 3.5.16 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-39450MEDIUMWordPress JetTabs plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-53991MEDIUMWordPress JetTricks plugin <= 1.5.4.1 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%