Vulnerabilidades em CrocoBlock
126 resultadosAnálise Vexday
A base do Vexday registra 1 CVE associada ao fornecedor CrocoBlock, nenhuma delas listada como sob exploração ativa no catálogo KEV e nenhuma classificada como crítica pelo CVSS. A única vulnerabilidade foi publicada nos últimos 90 dias, o que indica risco recente, e a fraqueza dominante é a CWE-639 (bypass de autorização por chave controlada pelo usuário). Com volume reduzido, o panorama sugere monitoramento da correção e da exposição, sem indicação de pressão imediata.
CVE-2025-68502MEDIUMWordPress JetPopup plugin <= 2.0.20.1 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2025-53195MEDIUMWordPress JetEngine plugin <= 3.7.0 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2026-119482MEDIUMWordPress JetFormBuilder plugin <= 3.6.7.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-28134HIGHWordPress JetEngine plugin <= 3.7.2 - Remote Code Execution (RCE) vulnerabilityEPSS 0.3%CVE-2023-48761MEDIUMWordPress JetElements For Elementor plugin <= 2.6.13 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-123860MEDIUMWordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerabilityEPSS 0.3%CVE-2024-7144MEDIUMJetElements <= 2.6.20 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-123861MEDIUMWordPress JetFormBuilder – Hierarchical Select plugin <= 1.0.10 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2023-33212MEDIUMWordPress JetFormBuilder Plugin <= 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2026-84817HIGHWordPress JetFormBuilder plugin <= 3.6.5.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-81760HIGHWordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-49930HIGHWordPress JetSearch plugin <= 3.5.10 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-53989MEDIUMWordPress JetBlocks For Elementor plugin <= 1.3.19 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-53995MEDIUMWordPress JetPopup plugin <= 2.0.15.1 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-53982MEDIUMWordPress JetElements For Elementor plugin <= 2.7.7 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-53996MEDIUMWordPress JetSearch plugin <= 3.5.10.1 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-53984MEDIUMWordPress JetTabs plugin <= 2.2.9 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-53994MEDIUMWordPress JetPopup plugin <= 2.0.15 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-53991MEDIUMWordPress JetTricks plugin <= 1.5.4.1 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-107870HIGHWordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%