CrocoBlock JetEngine

• CVE-2026-123477 Medium 6.5 WordPress JetEngine plugin <= 3.9.0.2 - Cross Site Scripting (XSS) vulnerability –
• CVE-2026-39736 High 8.5 WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerability 0.3%
• CVE-2026-39735 Medium 6.5 WordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerability 0.3%
• CVE-2026-115608 High 8.5 WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability 0.3%
• CVE-2026-107870 High 7.1 WordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-97237 High 7.1 WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-81760 High 7.1 WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2026-49076 Critical 9.3 WordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerability 0.4%
• CVE-2026-12360 High 7.5 JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint 0.3%
• CVE-2026-42774 Critical 9.3 WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerability 0.4%
• CVE-2026-4352 High 7.5 JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' Parameter 0.4%
• CVE-2026-4662 High 7.5 JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' Parameter 0.3%
• CVE-2026-32355 High 8.8 WordPress JetEngine plugin < 3.8.4.1 - Deserialization of untrusted data vulnerability 0.4%
• CVE-2026-28134 High 8.5 WordPress JetEngine plugin <= 3.7.2 - Remote Code Execution (RCE) vulnerability 0.3%
• CVE-2025-68495 High 7.1 WordPress JetEngine plugin <= 3.8.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-67923 High 7.1 WordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2025-69333 Medium 4.3 WordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerability 0.2%
• CVE-2025-49938 Medium 6.5 WordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-53194 High 8.5 WordPress JetEngine <= 3.7.0 - Remote Code Execution (RCE) Vulnerability 0.4%
• CVE-2025-53195 Medium 6.5 WordPress JetEngine plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability 0.3%
• CVE-2025-53196 Medium 6.5 WordPress JetEngine <= 3.7.0 - Sensitive Data Exposure Vulnerability 0.5%
• CVE-2025-54688 Medium 6.5 WordPress JetEngine Plugin plugin <= 3.7.1.2 - Cross Site Scripting (XSS) Vulnerability 0.2%
• CVE-2025-26870 Medium 6.5 WordPress JetEngine plugin <= 3.6.4.1 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2025-0369 Medium 6.4 Jet Engine <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via list_tag Parameter 0.3%
• CVE-2023-48758 High 7.1 WordPress JetEngine plugin <= 3.2.4 - Broken Access Control vulnerability 0.3%
• CVE-2023-48757 High 8.8 WordPress JetEngine plugin <= 3.2.4 - Privilege Escalation vulnerability 0.6%