Crocoblock
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| JetEngine | 25 | – | Oct 29, 2026 |
| JetElements For Elementor | 18 | – | Oct 29, 2026 |
| JetBlocks For Elementor | 9 | – | Oct 9, 2026 |
| JetFormBuilder | 8 | – | Nov 4, 2026 |
| JetSearch | 7 | – | Jul 13, 2026 |
| JetTabs | 7 | – | Dec 29, 2025 |
| JetBlog | 6 | – | Oct 9, 2026 |
| JetPopup | 6 | – | Sep 4, 2026 |
| JetSmartFilters | 6 | – | Oct 29, 2026 |
| JetWooBuilder | 5 | – | Oct 22, 2025 |
| JetReviews | 4 | – | Oct 9, 2026 |
| JetMenu | 3 | – | Oct 12, 2026 |
| JetElements | 3 | – | Jan 21, 2025 |
| JetTricks | 3 | – | Aug 20, 2025 |
| JetProductGallery | 2 | – | Aug 14, 2025 |
| JetAppointment | 1 | – | Oct 2, 2026 |
| JetGridBuilder | 1 | – | Aug 19, 2024 |
| JetFormBuilder — Dynamic Blocks Form Builder | 1 | – | May 28, 2023 |
| JetProductTables | 1 | – | Oct 14, 2026 |
| JetThemeCore | 1 | – | Jul 9, 2024 |
| JetBooking | 1 | – | Mar 11, 2026 |
| JetWidgets for Elementor and WooCommerce | 1 | – | Aug 1, 2024 |
| JetCompareWishlist | 1 | – | Apr 10, 2025 |
Exploited and recent CVEs
- CVE-2026-119481 WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability 0.4%
- CVE-2026-119480 WordPress JetFormBuilder plugin <= 3.6.7.1 - Attachment Deletion Via Media-Field Preset vulnerability 0.4%
- CVE-2026-119479 WordPress JetFormBuilder plugin <= 3.6.7.1 - Content Injection vulnerability 0.3%
- CVE-2026-119482 WordPress JetFormBuilder plugin <= 3.6.7.1 - Broken Access Control vulnerability 0.3%
- CVE-2026-39737 WordPress JetElements For Elementor plugin <= 2.9.2.6 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-39736 WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerability 0.3%
- CVE-2026-116857 WordPress JetSmartFilters plugin <= 3.8.6.2 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-39735 WordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerability 0.3%
- CVE-2026-114708 WordPress JetSmartFilters plugin <= 3.8.6.1 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-114707 WordPress JetElements For Elementor plugin <= 2.9.2.5 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-115608 WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability 0.3%
- CVE-2026-111414 WordPress JetElements For Elementor plugin <= 2.9.2.4 - Cross Site Scripting (XSS) vulnerability 0.1%
- CVE-2026-110890 WordPress JetSmartFilters plugin <= 3.8.6 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-107870 WordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-107867 WordPress JetProductTables plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-107431 WordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerability 0.3%
- CVE-2026-107865 WordPress JetMenu plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability 0.1%
- CVE-2026-107866 WordPress JetElements For Elementor plugin <= 2.9.2.3 - Cross Site Scripting (XSS) vulnerability 0.1%
- CVE-2026-94667 WordPress JetReviews plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-94661 WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-62049 WordPress JetBlocks For Elementor plugin <= 1.5.2.1 - Cross Site Scripting (XSS) vulnerability 0.1%
- CVE-2026-105879 WordPress JetElements For Elementor plugin <= 2.9.2.2 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-93875 JetAppointment <= 2.5.2.1 - Unauthenticated Stored Cross-Site Scripting via 'friendlyTime' Parameter 0.2%
- CVE-2026-97237 WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-84817 WordPress JetFormBuilder plugin <= 3.6.5.1 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2026-27347 WordPress JetPopup plugin <= 2.0.20.2 - Broken Access Control vulnerability 0.3%
- CVE-2026-81760 WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2026-61977 WordPress JetSearch plugin <= 3.6.1.2 - Sensitive Data Exposure vulnerability 0.3%
- CVE-2026-61976 WordPress JetBlocks For Elementor plugin <= 1.5.0 - Sensitive Data Exposure vulnerability 0.3%
- CVE-2026-61975 WordPress JetReviews plugin <= 3.0.1 - Sensitive Data Exposure vulnerability 0.3%