JetEngine vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

JE

Product

JetEngine

by Crocoblock · last CVE Oct 26, 2026

22

CVEs

0

On KEV

9.8

Max CVSS

3

New 30D

Vulnerabilities22 In the news0 Timeline

Severity mix

Critical 3High 13Medium 6Low 0

Severity

All severities22 Critical3 High13 Medium6 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add JetEngine to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-32355	8.8	0%	Mar 13	WordPress JetEngine plugin < 3.8.4.1 - Deserialization of untrusted data vulnerability Affected: through 3.8.4.1
CVE-2026-115608 New	8.5	0%	Oct 26	WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability Affected: through 3.9.0
CVE-2026-28134	8.5	0%	Mar 5	WordPress JetEngine plugin <= 3.7.2 - Remote Code Execution (RCE) vulnerability Affected: through 3.7.2
CVE-2025-53194	8.5	0%	Aug 20	WordPress JetEngine <= 3.7.0 - Remote Code Execution (RCE) Vulnerability Affected: through 3.7.0
CVE-2026-12360	7.5	0%	Jun 17	JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint Affected: through 3.8.10.1
CVE-2026-4352	7.5	0%	Apr 14	JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' Parameter Affected: through 3.8.6.1
CVE-2026-4662	7.5	0%	Mar 24	JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' Parameter Affected: through 3.8.6.1
CVE-2026-107870	7.1	0%	Oct 14	WordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability Affected: through 3.8.16
CVE-2026-97237	7.1	0%	Sep 30	WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability Affected: through 3.8.14.3
CVE-2026-81760	7.1	0%	Aug 28	WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability Affected: through 3.8.14.2
CVE-2025-68495	7.1	0%	Feb 20	WordPress JetEngine plugin <= 3.8.0 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 3.8.0
CVE-2025-67923	7.1	0%	Jan 22	WordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerability Affected: through 3.7.7
CVE-2023-48758	7.1	0%	Jan 2	WordPress JetEngine plugin <= 3.2.4 - Broken Access Control vulnerability Affected: through 3.2.4