Crocoblock vulnerabilities
126 CVEs and advisories name Crocoblock as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-123482WordPress JetFormBuilder plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-123484WordPress JetFormBuilder plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-123860WordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerability
- CVE-2026-123861WordPress JetFormBuilder – Hierarchical Select plugin <= 1.0.10 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2026-123483WordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerability
- CVE-2026-123477WordPress JetEngine plugin <= 3.9.0.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-119481WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability
- CVE-2026-119480WordPress JetFormBuilder plugin <= 3.6.7.1 - Attachment Deletion Via Media-Field Preset vulnerability
- CVE-2026-119479WordPress JetFormBuilder plugin <= 3.6.7.1 - Content Injection vulnerability
- CVE-2026-119482WordPress JetFormBuilder plugin <= 3.6.7.1 - Broken Access Control vulnerability
- CVE-2026-39737WordPress JetElements For Elementor plugin <= 2.9.2.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-39736WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerability
- CVE-2026-116857WordPress JetSmartFilters plugin <= 3.8.6.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-39735WordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerability
- CVE-2026-114708WordPress JetSmartFilters plugin <= 3.8.6.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-114707WordPress JetElements For Elementor plugin <= 2.9.2.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-115608WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability
- CVE-2026-111414WordPress JetElements For Elementor plugin <= 2.9.2.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-110890WordPress JetSmartFilters plugin <= 3.8.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-107870WordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-107867WordPress JetProductTables plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-107431WordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerability
- CVE-2026-107865WordPress JetMenu plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-107866WordPress JetElements For Elementor plugin <= 2.9.2.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-94667WordPress JetReviews plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-94661WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-62049WordPress JetBlocks For Elementor plugin <= 1.5.2.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-105879WordPress JetElements For Elementor plugin <= 2.9.2.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-93875JetAppointment <= 2.5.2.1 - Unauthenticated Stored Cross-Site Scripting via 'friendlyTime' Parameter
- CVE-2026-97237WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability