Skip to content
OpenAdvisories

Vendor

Crocoblock

126 known vulnerabilities.

Products

JetEngine 26 JetElements For Elementor 18 JetFormBuilder 12 JetBlocks For Elementor 9 JetTabs 7 JetSearch 7 JetSmartFilters 6 JetBlog 6 JetPopup 6 JetWooBuilder 5 JetReviews 4 JetMenu 3 JetTricks 3 JetElements 3 JetProductGallery 2 JetFormBuilder – Hierarchical Select 1 JetWidgets for Elementor and WooCommerce 1 JetThemeCore 1 JetAppointment 1 JetCompareWishlist 1 JetFormBuilder — Dynamic Blocks Form Builder 1 JetGridBuilder 1 JetProductTables 1 JetBooking 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2026-28134 Public exploit

    WordPress JetEngine plugin <= 3.7.2 - Remote Code Execution (RCE) vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in Crocoblock JetEngine jet-engine allows Remote Code Inclusion.This issue affects JetEngine: from n/a through <= 3.7.2.

    Crocoblock JetEngine
  • High 7.1
    CVE-2025-67923 Public exploit

    WordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows Reflected XSS.This issue affects JetEngine: from n/a through <= 3.7.7.

    Crocoblock JetEngine