| CVE-2026-18202 |
The JetEngine WordPress plugin before 3.8.14 adds SVG to the site-wide list of allowed upload types without sanitising…
|
6.8
Medium
|
Aug 19, 2026 |
| CVE-2026-17019 |
The JetEngine WordPress plugin before 3.8.13.1 does not sanitise uploaded SVG files before storing and serving them, and…
|
6.1
Medium
|
Aug 10, 2026 |
| CVE-2026-14864 |
The JetEngine WordPress plugin before 3.8.12 does not escape a post meta value before outputting it through one of its…
|
5.4
Medium
|
Aug 2, 2026 |
| CVE-2023-1406 |
The JetEngine WordPress plugin before 3.1.3.1 includes uploaded files without adequately ensuring that they are not…
|
8.8
High
|
Apr 10, 2023 |