Crocoblock JetEngine vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20258
3. 202616

Newest CVEs

• CVE-2026-39736

  WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerability

  Crocoblock · JetEngine

  High8.5
• CVE-2026-39735

  WordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerability

  Crocoblock · JetEngine

  Medium6.5
• CVE-2026-115608

  WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability

  Crocoblock · JetEngine

  High8.5
• CVE-2026-107870

  WordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability

  Crocoblock · JetEngine

  High7.1
• CVE-2026-97237

  WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability

  Crocoblock · JetEngine

  High7.1
• CVE-2026-81760

  WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability

  Crocoblock · JetEngine

  High7.1
• CVE-2026-49076

  WordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerability

  Crocoblock · JetEngine

  Critical9.3
• CVE-2026-12360

  JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint

  Crocoblock · JetEngine

  High7.5
• CVE-2026-42774

  WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerability

  Crocoblock · JetEngine

  Critical9.3
• CVE-2026-4352

  JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' Parameter

  Crocoblock · JetEngine

  High7.5