Crocoblock. Jetimpex Inc.
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| JetEngine | 7 | – | Sep 30, 2026 |
| JetBooking | 3 | – | Jul 23, 2026 |
| JetElements For Elementor | 2 | – | Sep 17, 2026 |
| JetReviews | 1 | – | Jul 2, 2026 |
| JetSearch | 1 | – | Sep 17, 2026 |
| JetSmartFilters | 1 | – | Jun 26, 2026 |
| JetTabs | 1 | – | Sep 17, 2026 |
| JetAppointment | 1 | – | Aug 18, 2026 |
| JetTricks | 1 | – | Sep 23, 2026 |
| JetBlocks For Elementor | 1 | – | Sep 17, 2026 |
| JetBlog | 1 | – | Sep 17, 2026 |
Exploited and recent CVEs
- CVE-2026-97265 WordPress JetEngine plugin <= 3.8.15.3 - Cross Site Scripting (XSS) vulnerability 0.1%
- CVE-2026-97238 WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-93618 WordPress JetTricks plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-66579 WordPress JetElements For Elementor plugin <= 2.9.2.1 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-66577 WordPress JetSearch plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-66576 WordPress JetBlocks For Elementor plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-66573 WordPress JetTabs plugin <= 2.3.3.1 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-66572 WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-66581 WordPress JetEngine plugin <= 3.8.14.1 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2026-66613 WordPress JetEngine plugin <= 3.8.14 - Remote Code Execution (RCE) vulnerability 0.9%
- CVE-2026-73365 WordPress JetAppointment plugin <= 2.5.2 - SQL Injection vulnerability 0.4%
- CVE-2026-28082 WordPress JetEngine plugin <= 3.8.13.1 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2026-65468 WordPress JetBooking plugin <= 4.1.2 - Broken Access Control vulnerability 0.3%
- CVE-2026-65467 WordPress JetEngine plugin <= 3.8.11 - Server Side Request Forgery (SSRF) vulnerability 0.2%
- CVE-2026-65466 WordPress JetBooking plugin <= 4.1.2 - Server Side Request Forgery (SSRF) vulnerability 0.2%
- CVE-2026-65465 WordPress JetElements For Elementor plugin <= 2.9.1.1 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-57354 WordPress JetReviews plugin <= 3.0.0.1 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-56068 WordPress JetEngine plugin <= 3.8.10.2 - SQL Injection vulnerability 0.4%
- CVE-2026-56067 WordPress JetSmartFilters plugin <= 3.8.3 - SQL Injection vulnerability 0.5%
- CVE-2026-54820 WordPress JetBooking plugin <= 4.0.4.1 - SQL Injection vulnerability 0.4%