Skip to content

Known vulnerabilities in Crocoblock JetSearch

Is your version affected?

CVE Summary Score Published
CVE-2026-61977 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetSearch… 5.3 Medium Jul 13, 2026
CVE-2025-68504 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock… 6.5 Medium Dec 29, 2025
CVE-2025-49931 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock… 9.3 Critical Oct 22, 2025
CVE-2025-49930 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock… 7.1 High Oct 22, 2025
CVE-2025-53996 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock… 6.5 Medium Jul 16, 2025
CVE-2025-31043 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock… 6.5 Medium Mar 31, 2025
CVE-2024-7136 The JetSearch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions… 6.4 Medium Aug 16, 2024

Other Crocoblock products