Skip to content
OpenAdvisories

Product · Crocoblock

JetBlog

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-68503

    WordPress JetBlog plugin <= 2.4.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Crocoblock JetBlog jet-blog allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetBlog: from n/a through <= 2.4.7.

    Crocoblock JetBlog
  • Medium 6.5
    CVE-2025-49933

    WordPress JetBlog plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog: from n/a through <= 2.4.4.

    Crocoblock JetBlog
  • Medium 6.5
    CVE-2025-49932

    WordPress JetBlog plugin <= 2.4.4.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog jet-blog allows Stored XSS.This issue affects JetBlog: from n/a through <= 2.4.4.1.

    Crocoblock JetBlog
  • Medium 6.5
    CVE-2025-26744

    WordPress JetBlog plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog jet-blog allows DOM-Based XSS.This issue affects JetBlog: from n/a through <= 2.4.3.

    Crocoblock JetBlog