TI-2026-37831 CVE-2026-52706 · GHSA-qw4p-9prr-vcv7
WordPress JetEngine plugin <= 3.8.10 - PHP Object Injection vulnerability
Priority MEDIUM 49
Unauthenticated PHP Object Injection in JetEngine <= 3.8.10 versions.
Jetimpex Inc.
Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Jetimpex Inc. records in CISA KEVNo Jetimpex Inc. vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
11 records
TI-2026-36301 CVE-2026-49075 · GHSA-jch3-56hc-53q6
WordPress JetEngine plugin <= 3.8.9.1 - PHP Object Injection vulnerability
Priority MEDIUM 49
Contributor PHP Object Injection in JetEngine <= 3.8.9.1 versions.
TI-2026-39091 CVE-2026-54187 · GHSA-r365-mxm3-c49c
WordPress JetEngine plugin <= 3.8.10.1 - SQL Injection vulnerability
Priority MEDIUM 46
Unauthenticated SQL Injection in JetEngine <= 3.8.10.1 versions.
TI-2026-36310 CVE-2026-49084 · GHSA-65wx-2g95-vf3v
WordPress JetEngine plugin < 3.8.9.1 - SQL Injection vulnerability
Priority MEDIUM 46
Unauthenticated SQL Injection in JetEngine < 3.8.9.1 versions.
TI-2026-36305 CVE-2026-49079 · GHSA-rm7h-637q-mh3m
WordPress JetSearch plugin <= 3.5.17 - SQL Injection vulnerability
Priority MEDIUM 46
Unauthenticated SQL Injection in JetSearch <= 3.5.17 versions.
TI-2026-36139 CVE-2026-48875 · GHSA-97hc-qqx6-76wc
WordPress JetSmartFilters plugin <= 3.8.1 - SQL Injection vulnerability
Priority MEDIUM 46
Unauthenticated SQL Injection in JetSmartFilters <= 3.8.1 versions.
TI-2026-37821 CVE-2026-52696 · GHSA-qh8c-5j7c-5qv9
WordPress JetBlog plugin <= 2.4.8 - Sensitive Data Exposure vulnerability
Priority LOW 38
Unauthenticated Sensitive Data Exposure in JetBlog <= 2.4.8 versions.
TI-2026-39093 CVE-2026-54189 · GHSA-mrx8-c587-75qg
WordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerability
Priority LOW 30
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions.
TI-2026-39092 CVE-2026-54188 · GHSA-jcgw-c44x-p34m
WordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerability
Priority LOW 30
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions.
TI-2026-36300 CVE-2026-49074 · GHSA-pvg6-vrjq-jpp8
WordPress JetEngine plugin <= 3.8.9.1 - Cross Site Scripting (XSS) vulnerability
Priority LOW 30
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.9.1 versions.
TI-2023-04808 CVE-2023-5230 · GHSA-4jr2-62qw-fhx8
TM WooCommerce Compare & Wishlist <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Priority LOW 29
The TM WooCommerce Compare & Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tm_woo_wishlist_table' shortcode in versions up to, and including, 1.1.7 due to insufficient input sanitization…