Crocoblock. Jetimpex Inc.

Records20All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Crocoblock. Jetimpex Inc. records in CISA KEV

No Crocoblock. Jetimpex Inc. vulnerabilities are listed in CISA KEV.

Records

20 records

TI-2026-47284 CVE-2026-66613 · GHSA-wrpq-j7q3-24j7

WordPress JetEngine plugin <= 3.8.14 - Remote Code Execution (RCE) vulnerability

MEDIUM 50

Unauthenticated Remote Code Execution (RCE) in JetEngine <= 3.8.14 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0086 Published 2026-08-19 No fix listed CWE-1336

TI-2026-51485 CVE-2026-73365 · GHSA-j77h-22x9-xwgc

WordPress JetAppointment plugin <= 2.5.2 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.004 Published 2026-08-18 No fix listed CWE-89

TI-2026-40460 CVE-2026-56068 · GHSA-6345-fj22-6hh8

WordPress JetEngine plugin <= 3.8.10.2 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in JetEngine <= 3.8.10.2 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.004 Published 2026-06-26 No fix listed CWE-89

TI-2026-40459 CVE-2026-56067 · GHSA-c2rx-68rq-4pfx

WordPress JetSmartFilters plugin <= 3.8.3 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in JetSmartFilters <= 3.8.3 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00454 Published 2026-06-26 No fix listed CWE-89

TI-2026-39623 CVE-2026-54820 · GHSA-xqjr-4848-35gg

WordPress JetBooking plugin <= 4.0.4.1 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in JetBooking <= 4.0.4.1 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.004 Published 2026-06-26 No fix listed CWE-89

TI-2026-47253 CVE-2026-66581 · GHSA-4gp5-x437-73g9

WordPress JetEngine plugin <= 3.8.14.1 - Cross Site Scripting (XSS) vulnerability

LOW 31

Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.1 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-08-20 No fix listed CWE-79

TI-2026-22423 CVE-2026-28082 · GHSA-4wv6-hfwf-hgxc

WordPress JetEngine plugin <= 3.8.13.1 - Cross Site Scripting (XSS) vulnerability

LOW 31

Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.13.1 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-08-06 No fix listed CWE-79

TI-2026-46638 CVE-2026-65468 · GHSA-fqvj-cq7c-v98r

WordPress JetBooking plugin <= 4.1.2 - Broken Access Control vulnerability

LOW 30

Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00294 Published 2026-07-23 No fix listed CWE-862

TI-2026-64000 CVE-2026-97265 · GHSA-8744-cxh8-r23v

WordPress JetEngine plugin <= 3.8.15.3 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00127 Published 2026-09-30 No fix listed CWE-79

TI-2026-63072 CVE-2026-93618 · GHSA-6qfg-7r25-4526

WordPress JetTricks plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-09-23 No fix listed CWE-79

TI-2026-47251 CVE-2026-66579 · GHSA-285q-cgqh-xq48