Product by Crocoblock

    Crocoblock JetEngine

    29 known vulnerabilities in Crocoblock JetEngine (Crocoblock), 0 of them actively exploited (CISA KEV).

    Key figures

    29

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Crocoblock JetEngine (Crocoblock)
    HighCVE-2023-1406

    JetEngine < 3.1.3.1 - Author+ Remote Code Execution

    also in 1 other product

    		8.8
    CriticalCVE-2021-41844

    Crocoblock JetEngine: security vulnerability

    		9.8
    HighCVE-2026-39736

    WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerability

    		8.5
    HighCVE-2026-115608

    WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability

    		8.5
    CriticalCVE-2026-49076

    WordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerability

    		9.3
    CriticalCVE-2026-42774

    WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerability

    		9.3
    HighCVE-2026-107870

    WordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2026-32355

    WordPress JetEngine plugin < 3.8.4.1 - Deserialization of untrusted data vulnerability

    		8.8
    HighCVE-2023-48757

    WordPress JetEngine plugin <= 3.2.4 - Privilege Escalation vulnerability

    		8.8
    MediumCVE-2026-39735

    WordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerability

    		6.5
    HighCVE-2026-97237

    WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2026-123477

    WordPress JetEngine plugin <= 3.9.0.2 - Cross Site Scripting (XSS) vulnerability

    		6.5
    HighCVE-2026-81760

    WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2026-12360

    JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint

    		7.5
    HighCVE-2025-53194

    WordPress JetEngine <= 3.7.0 - Remote Code Execution (RCE) Vulnerability

    		8.5
    HighCVE-2026-4352

    JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' Parameter

    		7.5
    HighCVE-2026-28134

    WordPress JetEngine plugin <= 3.7.2 - Remote Code Execution (RCE) vulnerability

    		8.5
    HighCVE-2026-4662

    JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' Parameter

    		7.5
    MediumCVE-2025-53196

    WordPress JetEngine <= 3.7.0 - Sensitive Data Exposure Vulnerability

    		6.5
    HighCVE-2025-67923

    WordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2025-68495

    WordPress JetEngine plugin <= 3.8.0 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2023-48758

    WordPress JetEngine plugin <= 3.2.4 - Broken Access Control vulnerability

    		7.1
    MediumCVE-2021-38607

    Crocoblock JetEngine: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2025-53195

    WordPress JetEngine plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability

    		6.5
    MediumCVE-2025-0369

    Crocoblock JetEngine: Cross-site Scripting

    		6.4

    All vulnerabilities in search

    All products by Crocoblock