CVE-2026-61977mediumCWE-497

CVE-2026-61977: falha de média gravidade em Crocoblock JetSearch

WordPress JetSearch plugin <= 3.6.1.2 - Sensitive Data Exposure vulnerability

Publicada em

Seguir esta CVE+ Monitorar JetSearch

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.3%
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetSearch jet-search allows Retrieve Embedded Sensitive Data.This issue affects JetSearch: from n/a through <= 3.6.1.2.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Crocoblock · JetSearch
CVEs relacionadas — Crocoblock JetSearch

No mesmo produto, das mais perigosas para as menos.

CVE-2025-49931CRITICALWordPress JetSearch plugin <= 3.5.10 - SQL Injection vulnerabilityEPSS 0.5%CVE-2024-7136MEDIUMJetSearch <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-49930HIGHWordPress JetSearch plugin <= 3.5.10 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-53996MEDIUMWordPress JetSearch plugin <= 3.5.10.1 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-31043MEDIUMWordPress JetSearch plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-68504MEDIUMWordPress JetSearch plugin <= 3.5.16 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%