Skip to content
OpenAdvisories

Product · Crocoblock

JetEngine

26 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-123477

    WordPress JetEngine plugin <= 3.9.0.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through 3.9.0.2.

    Crocoblock JetEngine
  • Medium 6.5
    CVE-2026-39735

    WordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetEngine: from n/a through 3.9.0.1.

    Crocoblock JetEngine
  • Medium 4.3
    CVE-2025-69333

    WordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetEngine: from n/a through <= 3.8.1.1.

    Crocoblock JetEngine
  • Medium 6.5
    CVE-2025-49938

    WordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through <= 3.7.3.

    Crocoblock JetEngine
  • Medium 6.5
    CVE-2025-53195

    WordPress JetEngine plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through <= 3.7.0.

    Crocoblock JetEngine
  • Medium 6.5
    CVE-2025-53196

    WordPress JetEngine <= 3.7.0 - Sensitive Data Exposure Vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetEngine jet-engine allows Retrieve Embedded Sensitive Data.This issue affects JetEngine: from n/a through <= 3.7.0.

    Crocoblock JetEngine
  • Medium 6.5
    CVE-2025-54688

    WordPress JetEngine Plugin plugin <= 3.7.1.2 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through <= 3.7.1.2.

    Crocoblock JetEngine
  • Medium 6.5
    CVE-2025-26870

    WordPress JetEngine plugin <= 3.6.4.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEngine: from n/a through <= 3.6.4.1.

    Crocoblock JetEngine
  • Medium 6.4
    CVE-2025-0369

    Jet Engine <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via list_tag Parameter

    The JetEngine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘list_tag’ parameter in all versions up to, and including, 3.6.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attac…

    Crocoblock JetEngine Web / CMS