Medium · 5.3 CVE-2026-61977 EUVD-2026-43319GHSA-pvvh-2gxc-vqqj

WordPress JetSearch plugin <= 3.6.1.2 - Sensitive Data Exposure vulnerability

Published Jul 13, 2026 · Updated Jul 13, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetSearch jet-search allows Retrieve Embedded Sensitive Data.This issue affects JetSearch: from n/a through <= 3.6.1.2.

Affected products

Vendor	Product	Affected	Fixed
Crocoblock	JetSearch	≤ 3.6.1.2	—

References

https://patchstack.com/database/Wordpress/Plugin/jet-search/vulnerability/wordpress-jetsearch-plugin-3-6-1-2-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry