Vulnerabilidades em Crocoblock
89 resultadosCVE-2024-7146HIGHJetTabs <= 2.2.3 - Authenticated (Contributor+) Arbitrary Local File InclusionEPSS 1.0%CVE-2024-7145HIGHJetElements <= 2.6.20 - Authenticated (Contributor+) Arbitrary Local File InclusionEPSS 0.9%CVE-2024-37497HIGHWordPress JetThemeCore plugin < 2.2.1 - Subscriber+ Arbitrary File Deletion vulnerabilityEPSS 0.7%CVE-2023-37866HIGHWordPress JetFormBuilder plugin <= 3.0.8 - Authenticated Privilege Escalation vulnerabilityEPSS 0.6%CVE-2023-39157CRITICALWordPress JetElements For Elementor Plugin <= 2.6.10 is vulnerable to Remote Code Execution (RCE)EPSS 0.6%CVE-2023-48757HIGHWordPress JetEngine plugin <= 3.2.4 - Privilege Escalation vulnerabilityEPSS 0.6%CVE-2024-43221HIGHWordPress JetGridBuilder plugin <= 1.1.2 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-39396HIGHWordPress JetReviews plugin <= 2.3.6 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-22279HIGHWordPress JetCompareWishlist plugin <= 1.5.9 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-31016HIGHWordPress JetWooBuilder plugin <= 2.1.18 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2024-38772MEDIUMWordPress JetWidgets for Elementor and WooCommerce plugin <= 1.1.7 - Contributor+ Limited Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-53196MEDIUMWordPress JetEngine <= 3.7.0 - Sensitive Data Exposure VulnerabilityEPSS 0.5%CVE-2025-49921HIGHWordPress JetReviews plugin <= 3.0.0 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2023-48760HIGHWordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-48756HIGHWordPress JetBlocks For Elementor Plugin <= 1.3.8 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-48759HIGHWordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Arbitrary Attachment Download vulnerabilityEPSS 0.4%CVE-2025-49931CRITICALWordPress JetSearch plugin <= 3.5.10 - SQL Injection vulnerabilityEPSS 0.4%CVE-2023-48763MEDIUMWordPress JetFormBuilder plugin <= 3.1.4 - Content Injection vulnerabilityEPSS 0.4%CVE-2026-42774CRITICALWordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-4352HIGHJetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' ParameterEPSS 0.4%