Description
Unauthenticated SQL Injection in JetEngine < 3.8.9.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jetimpex | JetEngine | < 3.8.9.1 | 3.8.9.1 |
Critical · 9.3
CVE-2026-49084
EUVD-2026-37621GHSA-65wx-2g95-vf3v
WordPress JetEngine plugin < 3.8.9.1 - SQL Injection vulnerability
Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack