Skip to content
OpenAdvisories

Vendor

Crocoblock

127 known vulnerabilities.

Products

JetEngine 27 JetElements For Elementor 18 JetFormBuilder 12 JetBlocks For Elementor 9 JetTabs 7 JetSearch 7 JetSmartFilters 6 JetBlog 6 JetPopup 6 JetWooBuilder 5 JetReviews 4 JetMenu 3 JetTricks 3 JetElements 3 JetProductGallery 2 JetFormBuilder – Hierarchical Select 1 JetWidgets for Elementor and WooCommerce 1 JetThemeCore 1 JetAppointment 1 JetCompareWishlist 1 JetFormBuilder — Dynamic Blocks Form Builder 1 JetGridBuilder 1 JetProductTables 1 JetBooking 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-119481

    WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Privilege Escalation.This issue affects JetFormBuilder: from n/a through 3.6.7.1.

    Crocoblock JetFormBuilder
  • Critical 9.3
    CVE-2026-49076

    WordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine jet-engine allows Blind SQL Injection.This issue affects JetEngine: from n/a through 3.8.9.1.

    Crocoblock JetEngine
  • Critical 9.3
    CVE-2026-42774

    WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine allows SQL Injection. This issue affects JetEngine: from n/a through 3.8.8.1.

    Crocoblock JetEngine
  • Critical 9.3
    CVE-2025-49931

    WordPress JetSearch plugin <= 3.5.10 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetSearch jet-search allows Blind SQL Injection.This issue affects JetSearch: from n/a through 3.5.10.

    Crocoblock JetSearch
  • Critical 9.0
    CVE-2023-39157

    WordPress JetElements For Elementor Plugin <= 2.6.10 is vulnerable to Remote Code Execution (RCE)

    Improper Control of Generation of Code ('Code Injection') vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor: from n/a through 2.6.10.

    Crocoblock JetElements For Elementor