Crocoblock

Products

ProductCVEsExploitedLatest
JetEngine25–Oct 29, 2026
JetElements For Elementor18–Oct 29, 2026
JetBlocks For Elementor9–Oct 9, 2026
JetFormBuilder8–Nov 4, 2026
JetSearch7–Jul 13, 2026
JetTabs7–Dec 29, 2025
JetBlog6–Oct 9, 2026
JetPopup6–Sep 4, 2026
JetSmartFilters6–Oct 29, 2026
JetWooBuilder5–Oct 22, 2025
JetReviews4–Oct 9, 2026
JetMenu3–Oct 12, 2026
JetElements3–Jan 21, 2025
JetTricks3–Aug 20, 2025
JetProductGallery2–Aug 14, 2025
JetAppointment1–Oct 2, 2026
JetGridBuilder1–Aug 19, 2024
JetFormBuilder — Dynamic Blocks Form Builder1–May 28, 2023
JetProductTables1–Oct 14, 2026
JetThemeCore1–Jul 9, 2024
JetBooking1–Mar 11, 2026
JetWidgets for Elementor and WooCommerce1–Aug 1, 2024
JetCompareWishlist1–Apr 10, 2025

Exploited and recent CVEs

  • CVE-2026-119481 Critical 9.8 WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability 0.4%
  • CVE-2026-119480 Medium 6.5 WordPress JetFormBuilder plugin <= 3.6.7.1 - Attachment Deletion Via Media-Field Preset vulnerability 0.4%
  • CVE-2026-119479 Medium 5.3 WordPress JetFormBuilder plugin <= 3.6.7.1 - Content Injection vulnerability 0.3%
  • CVE-2026-119482 Medium 5.3 WordPress JetFormBuilder plugin <= 3.6.7.1 - Broken Access Control vulnerability 0.3%
  • CVE-2026-39737 Medium 6.5 WordPress JetElements For Elementor plugin <= 2.9.2.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-39736 High 8.5 WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerability 0.3%
  • CVE-2026-116857 Medium 6.5 WordPress JetSmartFilters plugin <= 3.8.6.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-39735 Medium 6.5 WordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerability 0.3%
  • CVE-2026-114708 Medium 6.5 WordPress JetSmartFilters plugin <= 3.8.6.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-114707 Medium 6.5 WordPress JetElements For Elementor plugin <= 2.9.2.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-115608 High 8.5 WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability 0.3%
  • CVE-2026-111414 Medium 6.5 WordPress JetElements For Elementor plugin <= 2.9.2.4 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-110890 Medium 6.5 WordPress JetSmartFilters plugin <= 3.8.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-107870 High 7.1 WordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-107867 High 7.1 WordPress JetProductTables plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-107431 High 7.5 WordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerability 0.3%
  • CVE-2026-107865 Medium 6.5 WordPress JetMenu plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-107866 Medium 6.5 WordPress JetElements For Elementor plugin <= 2.9.2.3 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-94667 Medium 6.5 WordPress JetReviews plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-94661 High 7.1 WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-62049 Medium 6.5 WordPress JetBlocks For Elementor plugin <= 1.5.2.1 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-105879 Medium 6.5 WordPress JetElements For Elementor plugin <= 2.9.2.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-93875 High 7.2 JetAppointment <= 2.5.2.1 - Unauthenticated Stored Cross-Site Scripting via 'friendlyTime' Parameter 0.2%
  • CVE-2026-97237 High 7.1 WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-84817 High 7.1 WordPress JetFormBuilder plugin <= 3.6.5.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-27347 Medium 5.3 WordPress JetPopup plugin <= 2.0.20.2 - Broken Access Control vulnerability 0.3%
  • CVE-2026-81760 High 7.1 WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-61977 Medium 5.3 WordPress JetSearch plugin <= 3.6.1.2 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2026-61976 Medium 5.3 WordPress JetBlocks For Elementor plugin <= 1.5.0 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2026-61975 Medium 5.3 WordPress JetReviews plugin <= 3.0.1 - Sensitive Data Exposure vulnerability 0.3%