Vulnerabilidades en Crocoblock
125 resultadosCVE-2025-0369MEDIUMJet Engine <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via list_tag ParameterEPSS 0.3%CVE-2026-4662HIGHJetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' ParameterEPSS 0.3%CVE-2026-61975MEDIUMWordPress JetReviews plugin <= 3.0.1 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-61977MEDIUMWordPress JetSearch plugin <= 3.6.1.2 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-61976MEDIUMWordPress JetBlocks For Elementor plugin <= 1.5.0 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-12360HIGHJetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX EndpointEPSS 0.3%CVE-2026-107431HIGHWordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2023-48758HIGHWordPress JetEngine plugin <= 3.2.4 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-3496HIGHJetBooking <= 4.0.3 - Unauthenticated SQL Injection via 'check_in_date' ParameterEPSS 0.3%CVE-2025-68503MEDIUMWordPress JetBlog plugin <= 2.4.7 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-119479MEDIUMWordPress JetFormBuilder plugin <= 3.6.7.1 - Content Injection vulnerabilityEPSS 0.3%CVE-2026-27347MEDIUMWordPress JetPopup plugin <= 2.0.20.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-39736HIGHWordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-0371MEDIUMJet Elements <= 2.7.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple WidgetsEPSS 0.3%CVE-2025-67923HIGHWordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-7147MEDIUMJetBlocks <= 1.3.12 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-7136MEDIUMJetSearch <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-115608HIGHWordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-26870MEDIUMWordPress JetEngine plugin <= 3.6.4.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-39735MEDIUMWordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerabilityEPSS 0.3%