Aller au contenu

Vulnérabilités connues pour Crocoblock JetEngine

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-39736 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock… 8.5 Élevée 29 oct. 2026
CVE-2026-39735 Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly Configured Access… 6.5 Moyenne 29 oct. 2026
CVE-2026-115608 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock… 8.5 Élevée 26 oct. 2026
CVE-2026-107870 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock… 7.1 Élevée 14 oct. 2026
CVE-2026-97237 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock… 7.1 Élevée 30 sept. 2026
CVE-2026-81760 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock… 7.1 Élevée 28 août 2026
CVE-2026-49076 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock… 9.3 Critique 17 juin 2026
CVE-2026-12360 The JetEngine plugin for WordPress is vulnerable to SQL injection in all versions up to and including 3.8.10.1 7.5 Élevée 17 juin 2026
CVE-2026-42774 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock… 9.3 Critique 25 mai 2026
CVE-2026-4352 The JetEngine plugin for WordPress is vulnerable to SQL Injection via the Custom Content Type (CCT) REST API search… 7.5 Élevée 14 avr. 2026
CVE-2026-4662 The JetEngine plugin for WordPress is vulnerable to SQL Injection via the `listing_load_more` AJAX action in all… 7.5 Élevée 24 mars 2026
CVE-2026-32355 Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Object Injection.This issue… 8.8 Élevée 13 mars 2026
CVE-2026-28134 Improper Control of Generation of Code ('Code Injection') vulnerability in Crocoblock JetEngine jet-engine allows Remote… 8.5 Élevée 5 mars 2026
CVE-2025-68495 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock… 7.1 Élevée 20 févr. 2026
CVE-2025-67923 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock… 7.1 Élevée 22 janv. 2026
CVE-2025-69333 Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly Configured Access… 4.3 Moyenne 7 janv. 2026
CVE-2025-49938 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock… 6.5 Moyenne 22 oct. 2025
CVE-2025-53195 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock… 6.5 Moyenne 20 août 2025
CVE-2025-53194 Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Code Injection.This issue… 8.5 Élevée 20 août 2025
CVE-2025-53196 Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetEngine jet-engine allows Retrieve… 6.5 Moyenne 20 août 2025
CVE-2025-54688 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock… 6.5 Moyenne 14 août 2025
CVE-2025-26870 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock… 6.5 Moyenne 15 avr. 2025
CVE-2025-0369 The JetEngine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘list_tag’ parameter in all… 6.4 Moyenne 18 janv. 2025
CVE-2023-48758 Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly Configured Access… 7.1 Élevée 2 janv. 2025
CVE-2023-48757 Improper Privilege Management vulnerability in Crocoblock JetEngine allows Privilege Escalation.This issue affects… 8.8 Élevée 17 mai 2024

Autres produits Crocoblock