Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

134 records

Vendor: Crocoblock Clear all filters
TI-2026-86589 CVE-2026-123860 · GHSA-g4gf-m3hh-3j36

Cross-site scripting in Crocoblock JetFormBuilder WordPress plugin

Priority LOW 39

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Code Injection.This issue affects JetFormBuilder: from n/a through 3.6.8.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS — Published 2026-11-07 No fix listed CWE-80
TI-2026-86590 CVE-2026-123861 · GHSA-7fpw-9995-5q93

Authorization bypass in JetFormBuilder Hierarchical Select plugin

Priority LOW 27

Authorization Bypass Through User-Controlled Key vulnerability in CrocoBlock JetFormBuilder – Hierarchical Select jet-form-builder-hierarchical-select allows Exploiting Incorrectly Configured Access Control Security Leve…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS — Published 2026-11-07 No fix listed CWE-639
TI-2026-86588 CVE-2026-123483 · GHSA-42hh-jxq4-vvcg

Cross-site scripting in Crocoblock JetFormBuilder WordPress plugin

Priority LOW 39

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Code Injection.This issue affects JetFormBuilder: from n/a through 3.6.8.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS — Published 2026-11-07 No fix listed CWE-80
TI-2026-86578 CVE-2026-123477 · GHSA-c5jq-fpv4-5rjj

Stored cross-site scripting in Crocoblock JetEngine WordPress plugin

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through 3.9.0.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS — Published 2026-11-07 No fix listed CWE-79
TI-2026-85042 CVE-2026-119481 · GHSA-px6r-64ff-25cf

Privilege escalation in Crocoblock JetFormBuilder WordPress plugin

Priority MEDIUM 49

Incorrect Privilege Assignment vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Privilege Escalation.This issue affects JetFormBuilder: from n/a through 3.6.7.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0042 Published 2026-11-04 No fix listed CWE-266
TI-2026-83631 CVE-2026-119480 · GHSA-q397-gw93-chr5

Path traversal in JetFormBuilder plugin enables attachment deletion

Priority LOW 29

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Path Traversal.This issue affects JetFormBuilder: from n/a through 3.6.7.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00405 Published 2026-11-01 No fix listed CWE-22
TI-2026-83173 CVE-2026-119479 · GHSA-4gwr-56qh-7v28

Cross-site scripting in Crocoblock JetFormBuilder WordPress plugin

Priority LOW 30

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Code Injection.This issue affects JetFormBuilder: from n/a through 3.6.7.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00313 Published 2026-10-30 No fix listed CWE-80
TI-2026-83153 CVE-2026-119482 · GHSA-hpc9-3w4g-pf3v

Missing authorization in Crocoblock JetFormBuilder WordPress plugin

Priority LOW 30

Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder: from n/a through 3.6.7.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00272 Published 2026-10-30 No fix listed CWE-862
TI-2026-82423 CVE-2026-39737 · GHSA-mcc9-gwf4-c6ch

Stored XSS in Crocoblock JetElements For Elementor plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0017 Published 2026-10-29 No fix listed CWE-79
TI-2026-82422 CVE-2026-39736 · GHSA-hrcp-pm7p-235q

SQL injection in Crocoblock JetEngine plugin for WordPress

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine jet-engine allows SQL Injection.This issue affects JetEngine: from n/a through 3.9.0.1.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00305 Published 2026-10-29 No fix listed CWE-89
TI-2026-82419 CVE-2026-116857 · GHSA-mgh5-p3mr-46fg

Stored cross-site scripting in Crocoblock JetSmartFilters plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Stored XSS.This issue affects JetSmartFilters: from n/a through 3.…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00204 Published 2026-10-29 No fix listed CWE-79
TI-2026-82384 CVE-2026-39735 · GHSA-33c7-wphm-4hpm

Missing authorization in Crocoblock JetEngine WordPress plugin

Priority LOW 29

Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetEngine: from n/a through 3.9.0.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00274 Published 2026-10-29 No fix listed CWE-862
TI-2026-80331 CVE-2026-114708 · GHSA-xfpv-2x93-2wm9

Stored cross-site scripting in Crocoblock JetSmartFilters plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Stored XSS.This issue affects JetSmartFilters: from n/a through 3.…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0017 Published 2026-10-26 No fix listed CWE-79
TI-2026-80321 CVE-2026-114707 · GHSA-6rmv-jhgv-fwv3

Stored cross-site scripting in JetElements For Elementor plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00179 Published 2026-10-26 No fix listed CWE-79
TI-2026-80323 CVE-2026-115608 · GHSA-33gx-8vvr-wc8r

SQL injection in Crocoblock JetEngine plugin for WordPress

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine jet-engine allows SQL Injection.This issue affects JetEngine: from n/a through 3.9.0.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00289 Published 2026-10-26 No fix listed CWE-89
TI-2026-76377 CVE-2026-111414 · GHSA-6qx8-w3h9-hh9h

Stored cross-site scripting in JetElements For Elementor plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0013 Published 2026-10-19 No fix listed CWE-79
TI-2026-74862 CVE-2026-110890

Stored cross-site scripting in Crocoblock JetSmartFilters plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Stored XSS.This issue affects JetSmartFilters: from n/a through 3.…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00156 Published 2026-10-15 No fix listed CWE-79
TI-2026-74076 CVE-2026-107870 · GHSA-h8vg-33cw-976h

Cross-site scripting in Crocoblock JetEngine WordPress plugin

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEngine: from n/a through 3.8.16.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00244 Published 2026-10-14 No fix listed CWE-79
TI-2026-73980 CVE-2026-107867 · GHSA-v8q7-2fcm-r746

Reflected cross-site scripting in Crocoblock JetProductTables plugin

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetProductTables jet-product-tables allows Reflected XSS.This issue affects JetProductTables: from n/a thro…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00204 Published 2026-10-14 No fix listed CWE-79
TI-2026-73978 CVE-2026-107431 · GHSA-j3m8-hm59-fgm6

Broken access control in WordPress JetFormBuilder plugin

Priority LOW 39

Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder: from n/a through 3.6.6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00321 Published 2026-10-14 No fix listed CWE-862
TI-2026-70911 CVE-2026-107865 · GHSA-j59j-cqr7-mgx6

Stored cross-site scripting in Crocoblock JetMenu WordPress plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetMenu jet-menu allows Stored XSS.This issue affects JetMenu: from n/a through 3.0.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00127 Published 2026-10-12 No fix listed CWE-79
TI-2026-70912 CVE-2026-107866 · GHSA-c4vx-9mj7-8mr6

Stored XSS in Crocoblock JetElements For Elementor plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00127 Published 2026-10-12 No fix listed CWE-79
TI-2026-69931 CVE-2026-94667 · GHSA-pm33-cwf9-q278

Stored XSS in Crocoblock JetReviews WordPress plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetReviews jet-reviews allows Stored XSS.This issue affects JetReviews: from n/a through 3.1.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00156 Published 2026-10-09 No fix listed CWE-79
TI-2026-69926 CVE-2026-94661 · GHSA-2248-44qg-qmhq

Reflected cross-site scripting in Crocoblock JetBlog plugin

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog: from n/a through 2.4.10.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00175 Published 2026-10-09 No fix listed CWE-79
TI-2026-69903 CVE-2026-62049 · GHSA-xxf8-59jx-754r

Stored cross-site scripting in JetBlocks For Elementor plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Stored XSS.This issue affects JetBlocks For Elementor: from n/a t…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00127 Published 2026-10-09 No fix listed CWE-79
Load more