Vulnerabilidades em CrocoBlock
126 resultadosAnálise Vexday
A base do Vexday registra 1 CVE associada ao fornecedor CrocoBlock, nenhuma delas listada como sob exploração ativa no catálogo KEV e nenhuma classificada como crítica pelo CVSS. A única vulnerabilidade foi publicada nos últimos 90 dias, o que indica risco recente, e a fraqueza dominante é a CWE-639 (bypass de autorização por chave controlada pelo usuário). Com volume reduzido, o panorama sugere monitoramento da correção e da exposição, sem indicação de pressão imediata.
CVE-2025-0369MEDIUMJet Engine <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via list_tag ParameterEPSS 0.3%CVE-2026-4662HIGHJetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' ParameterEPSS 0.3%CVE-2026-61975MEDIUMWordPress JetReviews plugin <= 3.0.1 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-61977MEDIUMWordPress JetSearch plugin <= 3.6.1.2 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-61976MEDIUMWordPress JetBlocks For Elementor plugin <= 1.5.0 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-12360HIGHJetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX EndpointEPSS 0.3%CVE-2026-107431HIGHWordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2023-48758HIGHWordPress JetEngine plugin <= 3.2.4 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-3496HIGHJetBooking <= 4.0.3 - Unauthenticated SQL Injection via 'check_in_date' ParameterEPSS 0.3%CVE-2025-68503MEDIUMWordPress JetBlog plugin <= 2.4.7 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-119479MEDIUMWordPress JetFormBuilder plugin <= 3.6.7.1 - Content Injection vulnerabilityEPSS 0.3%CVE-2026-27347MEDIUMWordPress JetPopup plugin <= 2.0.20.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-39736HIGHWordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-0371MEDIUMJet Elements <= 2.7.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple WidgetsEPSS 0.3%CVE-2025-67923HIGHWordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-7147MEDIUMJetBlocks <= 1.3.12 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-7136MEDIUMJetSearch <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-115608HIGHWordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-26870MEDIUMWordPress JetEngine plugin <= 3.6.4.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-39735MEDIUMWordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerabilityEPSS 0.3%