Vulnerabilidades em CrocoBlock
126 resultadosAnálise Vexday
A base do Vexday registra 1 CVE associada ao fornecedor CrocoBlock, nenhuma delas listada como sob exploração ativa no catálogo KEV e nenhuma classificada como crítica pelo CVSS. A única vulnerabilidade foi publicada nos últimos 90 dias, o que indica risco recente, e a fraqueza dominante é a CWE-639 (bypass de autorização por chave controlada pelo usuário). Com volume reduzido, o panorama sugere monitoramento da correção e da exposição, sem indicação de pressão imediata.
CVE-2026-107867HIGHWordPress JetProductTables plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-116857MEDIUMWordPress JetSmartFilters plugin <= 3.8.6.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-54009MEDIUMWordPress JetSmartFilters plugin <= 3.6.8 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-24958MEDIUMWordPress JetElements For Elementor plugin <= 2.7.12.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-123483MEDIUMWordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerabilityEPSS 0.2%CVE-2025-69333MEDIUMWordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-55714MEDIUMWordPress JetElements For Elementor Plugin <= 2.7.9 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-93875HIGHJetAppointment <= 2.5.2.1 - Unauthenticated Stored Cross-Site Scripting via 'friendlyTime' ParameterEPSS 0.2%CVE-2025-54749MEDIUMWordPress JetProductGallery Plugin <= 2.2.0.2 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-114707MEDIUMWordPress JetElements For Elementor plugin <= 2.9.2.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97237HIGHWordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-94661HIGHWordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-114708MEDIUMWordPress JetSmartFilters plugin <= 3.8.6.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-39737MEDIUMWordPress JetElements For Elementor plugin <= 2.9.2.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-123477MEDIUMWordPress JetEngine plugin <= 3.9.0.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-105879MEDIUMWordPress JetElements For Elementor plugin <= 2.9.2.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-64355MEDIUMWordPress JetElements For Elementor plugin <= 2.7.12 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-68499MEDIUMWordPress JetTabs plugin <= 2.2.12 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-110890MEDIUMWordPress JetSmartFilters plugin <= 3.8.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-94667MEDIUMWordPress JetReviews plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%