Login Request a demo
CR
Vendor
Crocoblock
18 products with CVEs on record
70
CVEs
0
On KEV
16
New 30D
Products
JE
JetEngine
Crocoblock
9.8
18 CVEs0 on KEV3 new
JF
JetElements For Elementor
Crocoblock
8.8
8 CVEs0 on KEV4 new
JE
JetSmartFilters
Crocoblock
6.5
2 CVEs0 on KEV2 new
JE
JetBlog
Crocoblock
7.1
4 CVEs0 on KEV1 new
JF
JetBlocks For Elementor
Crocoblock
6.5
3 CVEs0 on KEV1 new
JE
JetFormBuilder
Crocoblock
8.8
3 CVEs0 on KEV1 new
JE
JetReviews
Crocoblock
7.5
3 CVEs0 on KEV1 new
JE
JetAppointment
Crocoblock
7.2
1 CVEs0 on KEV1 new
JE
JetMenu
Crocoblock
6.5
1 CVEs0 on KEV1 new
JE
JetProductTables
Crocoblock
7.1
1 CVEs0 on KEV1 new
JE
Jetelements
Crocoblock
9.8
7 CVEs0 on KEV0 new
JF
Jetwidgets For Elementor
Crocoblock
6.5
7 CVEs0 on KEV0 new
JE
JetSearch
Crocoblock
9.3
4 CVEs0 on KEV0 new
JE
JetPopup
Crocoblock
5.3
2 CVEs0 on KEV0 new
JE
JetTabs
Crocoblock
6.5
2 CVEs0 on KEV0 new
JE
JetWooBuilder
Crocoblock
6.5
2 CVEs0 on KEV0 new
JE
JetBooking
Crocoblock
7.5
1 CVEs0 on KEV0 new
JF
Jetengine For Elementor
Crocoblock
8.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-114708
New
JE
JetSmartFilters
Crocoblock
6.5
0%
Oct 26WordPress JetSmartFilters plugin <= 3.8.6.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-114707
New
JF
JetElements For Elementor
Crocoblock
6.5
0%
Oct 26WordPress JetElements For Elementor plugin <= 2.9.2.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-115608
New
JE
JetEngine
Crocoblock
8.5
0%
Oct 26WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability
CVE-2026-111414
JF
JetElements For Elementor
Crocoblock
6.5
0%
Oct 19WordPress JetElements For Elementor plugin <= 2.9.2.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-110890
JE
JetSmartFilters
Crocoblock
6.5
0%
Oct 15WordPress JetSmartFilters plugin <= 3.8.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-107870
JE
JetEngine
Crocoblock
7.1
0%
Oct 14WordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability
CVE-2026-107867
JE
JetProductTables
Crocoblock
7.1
0%
Oct 14WordPress JetProductTables plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-107431
JE
JetFormBuilder
Crocoblock
7.5
0%
Oct 14WordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerability
CVE-2026-107865
JE
JetMenu
Crocoblock
6.5
0%
Oct 12WordPress JetMenu plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-107866
JF
JetElements For Elementor
Crocoblock
6.5
0%
Oct 12WordPress JetElements For Elementor plugin <= 2.9.2.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-94667
JE
JetReviews
Crocoblock
6.5
0%
Oct 9WordPress JetReviews plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-94661
JE
JetBlog
Crocoblock
7.1
0%
Oct 9WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62049
JF
JetBlocks For Elementor
Crocoblock
6.5
0%
Oct 9WordPress JetBlocks For Elementor plugin <= 1.5.2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-105879
JF
JetElements For Elementor
Crocoblock
6.5
0%
Oct 6WordPress JetElements For Elementor plugin <= 2.9.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-93875
JE
JetAppointment
Crocoblock
7.2
0%
Oct 2JetAppointment <= 2.5.2.1 - Unauthenticated Stored Cross-Site Scripting via 'friendlyTime' Parameter
CVE-2026-97237
JE
JetEngine
Crocoblock
7.1
0%
Sep 30WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-84817
JE
JetFormBuilder
Crocoblock
7.1
0%
Sep 8WordPress JetFormBuilder plugin <= 3.6.5.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27347
JE
JetPopup
Crocoblock
5.3
0%
Sep 4WordPress JetPopup plugin <= 2.0.20.2 - Broken Access Control vulnerability
CVE-2026-81760
JE
JetEngine
Crocoblock
7.1
0%
Aug 28WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-61977
JE
JetSearch
Crocoblock
5.3
0%
Jul 13WordPress JetSearch plugin <= 3.6.1.2 - Sensitive Data Exposure vulnerability
CVE-2026-61976
JF
JetBlocks For Elementor
Crocoblock
5.3
0%
Jul 13WordPress JetBlocks For Elementor plugin <= 1.5.0 - Sensitive Data Exposure vulnerability
CVE-2026-61975
JE
JetReviews
Crocoblock
5.3
0%
Jul 13WordPress JetReviews plugin <= 3.0.1 - Sensitive Data Exposure vulnerability
CVE-2026-49076
JE
JetEngine
Crocoblock
9.3
0%
Jun 17WordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerability
CVE-2026-12360
JE
JetEngine
Crocoblock
7.5
0%
Jun 17JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint
CVE-2026-42774
JE
JetEngine
Crocoblock
9.3
0%
May 25WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerability
CVE-2026-4352
JE
JetEngine
Crocoblock
7.5
0%
Apr 14JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' Parameter
CVE-2026-4662
JE
JetEngine
Crocoblock
7.5
0%
Mar 24JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' Parameter
CVE-2026-32355
JE
JetEngine
Crocoblock
8.8
0%
Mar 13WordPress JetEngine plugin < 3.8.4.1 - Deserialization of untrusted data vulnerability
CVE-2026-3496
JE
JetBooking
Crocoblock
7.5
0%
Mar 11JetBooking <= 4.0.3 - Unauthenticated SQL Injection via 'check_in_date' Parameter
CVE-2026-28134
JE
JetEngine
Crocoblock
8.5
0%
Mar 5WordPress JetEngine plugin <= 3.7.2 - Remote Code Execution (RCE) vulnerability
CVE-2025-68495
JE
JetEngine
Crocoblock
7.1
0%
Feb 20WordPress JetEngine plugin <= 3.8.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-24958
JF
JetElements For Elementor
Crocoblock
6.5
0%
Feb 3WordPress JetElements For Elementor plugin <= 2.7.12.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67923
JE
JetEngine
Crocoblock
7.1
0%
Jan 22WordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-69333
JE
JetEngine
Crocoblock
4.3
0%
Jan 7WordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerability
CVE-2025-68498
JE
JetTabs
Crocoblock
6.5
0%
Dec 29WordPress JetTabs plugin <= 2.2.12 - Broken Access Control vulnerability
CVE-2025-68499
JE
JetTabs
Crocoblock
6.5
0%
Dec 29WordPress JetTabs plugin <= 2.2.12 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68502
JE
JetPopup
Crocoblock
4.3
0%
Dec 29WordPress JetPopup plugin <= 2.0.20.1 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-68503
JE
JetBlog
Crocoblock
6.5
0%
Dec 29WordPress JetBlog plugin <= 2.4.7 - Broken Access Control vulnerability
CVE-2025-68504
JE
JetSearch
Crocoblock
6.5
0%
Dec 29WordPress JetSearch plugin <= 3.5.16 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64355
JF
JetElements For Elementor
Crocoblock
6.5
0%
Dec 18WordPress JetElements For Elementor plugin <= 2.7.12 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49939
JF
JetElements For Elementor
Crocoblock
6.5
0%
Oct 22WordPress JetElements For Elementor plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49938
JE
JetEngine
Crocoblock
6.5
0%
Oct 22WordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49934
JF
JetBlocks For Elementor
Crocoblock
6.5
0%
Oct 22WordPress JetBlocks For Elementor plugin <= 1.3.18 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49933
JE
JetBlog
Crocoblock
6.5
0%
Oct 22WordPress JetBlog plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49932
JE
JetBlog
Crocoblock
6.5
0%
Oct 22WordPress JetBlog plugin <= 2.4.4.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49931
JE
JetSearch
Crocoblock
9.3
1%
Oct 22WordPress JetSearch plugin <= 3.5.10 - SQL Injection vulnerability
CVE-2025-49930
JE
JetSearch
Crocoblock
7.1
0%
Oct 22WordPress JetSearch plugin <= 3.5.10 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49928
JE
JetWooBuilder
Crocoblock
6.5
0%
Oct 22WordPress JetWooBuilder plugin <= 2.1.20 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49927
JE
JetWooBuilder
Crocoblock
6.5
0%
Oct 22WordPress JetWooBuilder plugin <= 2.1.20.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49921
JE
JetReviews
Crocoblock
7.5
0%
Oct 22WordPress JetReviews plugin <= 3.0.0 - Local File Inclusion vulnerability
CVE-2025-0371
JE
Jetelements
Crocoblock
5.4
0%
Jan 21The JetElements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 2.7.2.1 due to insufficient input…
CVE-2023-48758
JE
JetEngine
Crocoblock
7.1
0%
Jan 2WordPress JetEngine plugin <= 3.2.4 - Broken Access Control vulnerability
CVE-2024-10323
JF
Jetwidgets For Elementor
Crocoblock
5.4
0%
Nov 12The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.0.18 due to…
CVE-2024-7145
JE
Jetelements
Crocoblock
8.8
1%
Aug 16The JetElements plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.6.20 via the 'progress_type' parameter
CVE-2024-7144
JE
Jetelements
Crocoblock
5.4
0%
Aug 16The JetElements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' and 'slide_id' parameters in all versions up to, and including, 2.6.20 due to…
CVE-2024-4626
JF
Jetwidgets For Elementor
Crocoblock
5.4
0%
Jun 20The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘layout_type’ and 'id' parameters in all versions up to, and including,…
CVE-2023-48761
JE
Jetelements
Crocoblock
6.3
0%
Jun 19Missing Authorization vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor: from n/a through 2.6.13
CVE-2023-48760
JE
Jetelements
Crocoblock
9.8
0%
Jun 19Missing Authorization vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor: from n/a through 2.6.13
CVE-2023-48759
JE
Jetelements
Crocoblock
7.5
0%
Jun 19Missing Authorization vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor: from n/a through 2.6.13
CVE-2024-2507
JF
Jetwidgets For Elementor
Crocoblock
5.4
0%
Apr 9The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the widget button URL in all versions up to, and including, 1.0.16 due to…