Skip to content
OpenAdvisories

Vendor

Crocoblock

127 known vulnerabilities.

Products

JetEngine 27 JetElements For Elementor 18 JetFormBuilder 12 JetBlocks For Elementor 9 JetTabs 7 JetSearch 7 JetSmartFilters 6 JetBlog 6 JetPopup 6 JetWooBuilder 5 JetReviews 4 JetMenu 3 JetTricks 3 JetElements 3 JetProductGallery 2 JetFormBuilder – Hierarchical Select 1 JetWidgets for Elementor and WooCommerce 1 JetThemeCore 1 JetAppointment 1 JetCompareWishlist 1 JetFormBuilder — Dynamic Blocks Form Builder 1 JetGridBuilder 1 JetProductTables 1 JetBooking 1
All Critical High Medium Low Exploited only Public exploit

127 results · Feed

  • High 8.8
    CVE-2023-48757

    WordPress JetEngine plugin <= 3.2.4 - Privilege Escalation vulnerability

    Improper Privilege Management vulnerability in Crocoblock JetEngine allows Privilege Escalation.This issue affects JetEngine: from n/a through 3.2.4.

    Crocoblock JetEngine
  • High 7.2
    CVE-2023-37866

    WordPress JetFormBuilder plugin <= 3.0.8 - Authenticated Privilege Escalation vulnerability

    Improper Privilege Management vulnerability in Crocoblock JetFormBuilder allows Privilege Escalation.This issue affects JetFormBuilder: from n/a through 3.0.8.

    Crocoblock JetFormBuilder
  • Medium 5.3
    CVE-2023-48763

    WordPress JetFormBuilder plugin <= 3.1.4 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS vulnerability in Crocoblock JetFormBuilder allows Code Injection.This issue affects JetFormBuilder: from n/a through 3.1.4.

    Crocoblock JetFormBuilder
  • Critical 9.0
    CVE-2023-39157

    WordPress JetElements For Elementor Plugin <= 2.6.10 is vulnerable to Remote Code Execution (RCE)

    Improper Control of Generation of Code ('Code Injection') vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor: from n/a through 2.6.10.

    Crocoblock JetElements For Elementor
  • Medium 6.3
    CVE-2023-48762

    WordPress JetElements For Elementor Plugin <= 2.6.13 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor: from n/a through 2.6.13.

    Crocoblock JetElements For Elementor
  • High 7.1
    CVE-2023-48756

    WordPress JetBlocks For Elementor Plugin <= 1.3.8 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlocks For Elementor allows Reflected XSS.This issue affects JetBlocks For Elementor: from n/a through 1.3.8.

    Crocoblock JetBlocks For Elementor
  • Medium 4.3
    CVE-2023-33212

    WordPress JetFormBuilder Plugin <= 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Crocoblock JetFormBuilder — Dynamic Blocks Form Builder plugin <= 3.0.6 versions.

    Crocoblock JetFormBuilder — Dynamic Blocks Form Builder