JetEngine vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

JE

Product

JetEngine

by Crocoblock · last CVE Oct 26, 2026

22

CVEs

0

On KEV

9.8

Max CVSS

3

New 30D

Vulnerabilities22 In the news0 Timeline

Severity mix

Critical 3High 13Medium 6Low 0

Severity

All severities22 Critical3 High13 Medium6 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add JetEngine to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-49938	6.5	0%	Oct 22	WordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerability Affected: through 3.7.3
CVE-2025-53195	6.5	0%	Aug 20	WordPress JetEngine plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability Affected: through 3.7.0
CVE-2025-53196	6.5	1%	Aug 20	WordPress JetEngine <= 3.7.0 - Sensitive Data Exposure Vulnerability Affected: through 3.7.0
CVE-2025-54688	6.5	0%	Aug 14	WordPress JetEngine Plugin plugin <= 3.7.1.2 - Cross Site Scripting (XSS) Vulnerability Affected: through 3.7.1.2
CVE-2021-38607	5.4	1%	Aug 16	Crocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input Affected: before 2.6.1
CVE-2025-69333	4.3	0%	Jan 7	WordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerability Affected: through 3.8.1.1