Vendor
Crocoblock
130 known vulnerabilities in products by Crocoblock, 0 of them actively exploited (CISA KEV).
Key figures
130
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-1406 | JetEngine < 3.1.3.1 - Author+ Remote Code Execution | 8.8 | |
| Critical | CVE-2026-119481 | WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability | 9.8 | |
| Critical | CVE-2021-41844 | Crocoblock JetEngine: security vulnerability | 9.8 | |
| High | CVE-2024-7146 | JetTabs <= 2.2.3 - Authenticated (Contributor+) Arbitrary Local File Inclusion | 8.8 | |
| High | CVE-2024-7145 | JetElements <= 2.6.20 - Authenticated (Contributor+) Arbitrary Local File Inclusion | 8.8 | |
| High | CVE-2026-39736 | WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerability | 8.5 | |
| High | CVE-2026-115608 | WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability | 8.5 | |
| Critical | CVE-2026-49076 | WordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerability | 9.3 | |
| Critical | CVE-2025-49931 | WordPress JetSearch plugin <= 3.5.10 - SQL Injection vulnerability | 9.3 | |
| High | CVE-2026-107431 | WordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerability | 7.5 | |
| Critical | CVE-2023-39157 | WordPress JetElements For Elementor Plugin <= 2.6.10 is vulnerable to Remote Code Execution (RCE) | 9.0 | |
| Medium | CVE-2026-119480 | Crocoblock JetFormBuilder: Path Traversal | 6.5 | |
| Critical | CVE-2026-42774 | WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerability | 9.3 | |
| High | CVE-2026-107870 | WordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability | 7.1 | |
| High | CVE-2025-22279 | WordPress JetCompareWishlist plugin <= 1.5.9 - Local File Inclusion vulnerability | 7.5 | |
| High | CVE-2025-39396 | WordPress JetReviews plugin <= 2.3.6 - Local File Inclusion vulnerability | 7.5 | |
| High | CVE-2026-32355 | WordPress JetEngine plugin < 3.8.4.1 - Deserialization of untrusted data vulnerability | 8.8 | |
| High | CVE-2026-107867 | WordPress JetProductTables plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability | 7.1 | |
| High | CVE-2023-48757 | WordPress JetEngine plugin <= 3.2.4 - Privilege Escalation vulnerability | 8.8 | |
| High | CVE-2026-93875 | JetAppointment <= 2.5.2.1 - Unauthenticated Stored Cross-Site Scripting via 'friendlyTime' Parameter | 7.2 | |
| High | CVE-2024-37497 | WordPress JetThemeCore plugin < 2.2.1 - Subscriber+ Arbitrary File Deletion vulnerability | 7.7 | |
| High | CVE-2026-94661 | WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability | 7.1 | |
| High | CVE-2023-37866 | WordPress JetFormBuilder plugin <= 3.0.8 - Authenticated Privilege Escalation vulnerability | 7.2 | |
| Medium | CVE-2026-39735 | WordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerability | 6.5 | |
| High | CVE-2025-31016 | WordPress JetWooBuilder plugin <= 2.1.18 - Local File Inclusion vulnerability | 7.5 |