| CVE-2026-39736 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock…
|
8.5
High
|
Oct 29, 2026 |
| CVE-2026-39735 |
Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly Configured Access…
|
6.5
Medium
|
Oct 29, 2026 |
| CVE-2026-115608 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock…
|
8.5
High
|
Oct 26, 2026 |
| CVE-2026-107870 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock…
|
7.1
High
|
Oct 14, 2026 |
| CVE-2026-97237 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock…
|
7.1
High
|
Sep 30, 2026 |
| CVE-2026-81760 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock…
|
7.1
High
|
Aug 28, 2026 |
| CVE-2026-49076 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock…
|
9.3
Critical
|
Jun 17, 2026 |
| CVE-2026-12360 |
The JetEngine plugin for WordPress is vulnerable to SQL injection in all versions up to and including 3.8.10.1
|
7.5
High
|
Jun 17, 2026 |
| CVE-2026-42774 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock…
|
9.3
Critical
|
May 25, 2026 |
| CVE-2026-4352 |
The JetEngine plugin for WordPress is vulnerable to SQL Injection via the Custom Content Type (CCT) REST API search…
|
7.5
High
|
Apr 14, 2026 |
| CVE-2026-4662 |
The JetEngine plugin for WordPress is vulnerable to SQL Injection via the `listing_load_more` AJAX action in all…
|
7.5
High
|
Mar 24, 2026 |
| CVE-2026-32355 |
Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Object Injection.This issue…
|
8.8
High
|
Mar 13, 2026 |
| CVE-2026-28134 |
Improper Control of Generation of Code ('Code Injection') vulnerability in Crocoblock JetEngine jet-engine allows Remote…
|
8.5
High
|
Mar 5, 2026 |
| CVE-2025-68495 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock…
|
7.1
High
|
Feb 20, 2026 |
| CVE-2025-67923 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock…
|
7.1
High
|
Jan 22, 2026 |
| CVE-2025-69333 |
Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly Configured Access…
|
4.3
Medium
|
Jan 7, 2026 |
| CVE-2025-49938 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock…
|
6.5
Medium
|
Oct 22, 2025 |
| CVE-2025-53195 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock…
|
6.5
Medium
|
Aug 20, 2025 |
| CVE-2025-53194 |
Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Code Injection.This issue…
|
8.5
High
|
Aug 20, 2025 |
| CVE-2025-53196 |
Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetEngine jet-engine allows Retrieve…
|
6.5
Medium
|
Aug 20, 2025 |
| CVE-2025-54688 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock…
|
6.5
Medium
|
Aug 14, 2025 |
| CVE-2025-26870 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock…
|
6.5
Medium
|
Apr 15, 2025 |
| CVE-2025-0369 |
The JetEngine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘list_tag’ parameter in all…
|
6.4
Medium
|
Jan 18, 2025 |
| CVE-2023-48758 |
Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly Configured Access…
|
7.1
High
|
Jan 2, 2025 |
| CVE-2023-48757 |
Improper Privilege Management vulnerability in Crocoblock JetEngine allows Privilege Escalation.This issue affects…
|
8.8
High
|
May 17, 2024 |