JetBlog vulnerabilities | LiveThreat CVE Feed

Product

JetBlog

by Crocoblock · last CVE Oct 9, 2026

CVEs

On KEV

7.1

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 3Low 0

Severity

Exploitation

Watch

Add JetBlog to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-94661	7.1	0%	Oct 9	WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability Affected: through 2.4.10
CVE-2025-68503	6.5	0%	Dec 29	WordPress JetBlog plugin <= 2.4.7 - Broken Access Control vulnerability Affected: through 2.4.7
CVE-2025-49933	6.5	0%	Oct 22	WordPress JetBlog plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability Affected: through 2.4.4
CVE-2025-49932	6.5	0%	Oct 22	WordPress JetBlog plugin <= 2.4.4.1 - Cross Site Scripting (XSS) vulnerability Affected: through 2.4.4.1