# cve.now: Crocoblock The newest entries naming Crocoblock as an affected vendor (up to 200), of 126 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md. - [CVE-2026-123482](https://cve.now/CVE-2026-123482.md): WordPress JetFormBuilder plugin \<= 3.6.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1) - [CVE-2026-123484](https://cve.now/CVE-2026-123484.md): WordPress JetFormBuilder plugin \<= 3.6.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1) - [CVE-2026-123860](https://cve.now/CVE-2026-123860.md): WordPress JetFormBuilder plugin \<= 3.6.8 - Content Injection vulnerability (CVSS 5.3) - [CVE-2026-123861](https://cve.now/CVE-2026-123861.md): WordPress JetFormBuilder – Hierarchical Select plugin \<= 1.0.10 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3) - [CVE-2026-123483](https://cve.now/CVE-2026-123483.md): WordPress JetFormBuilder plugin \<= 3.6.8 - Content Injection vulnerability (CVSS 5.3) - [CVE-2026-123477](https://cve.now/CVE-2026-123477.md): WordPress JetEngine plugin \<= 3.9.0.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2026-119481](https://cve.now/CVE-2026-119481.md): WordPress JetFormBuilder plugin \<= 3.6.7.1 - Privilege Escalation vulnerability (CVSS 9.8) - [CVE-2026-119480](https://cve.now/CVE-2026-119480.md): WordPress JetFormBuilder plugin \<= 3.6.7.1 - Attachment Deletion Via Media-Field Preset vulnerability (CVSS 6.5) - [CVE-2026-119479](https://cve.now/CVE-2026-119479.md): WordPress JetFormBuilder plugin \<= 3.6.7.1 - Content Injection vulnerability (CVSS 5.3) - [CVE-2026-119482](https://cve.now/CVE-2026-119482.md): WordPress JetFormBuilder plugin \<= 3.6.7.1 - Broken Access Control vulnerability (CVSS 5.3) - [CVE-2026-39737](https://cve.now/CVE-2026-39737.md): WordPress JetElements For Elementor plugin \<= 2.9.2.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2026-39736](https://cve.now/CVE-2026-39736.md): WordPress JetEngine plugin \<= 3.9.0.1 - SQL Injection vulnerability (CVSS 8.5) - [CVE-2026-116857](https://cve.now/CVE-2026-116857.md): WordPress JetSmartFilters plugin \<= 3.8.6.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2026-39735](https://cve.now/CVE-2026-39735.md): WordPress JetEngine plugin \<= 3.9.0.1 - Broken Access Control vulnerability (CVSS 6.5) - [CVE-2026-114708](https://cve.now/CVE-2026-114708.md): WordPress JetSmartFilters plugin \<= 3.8.6.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2026-114707](https://cve.now/CVE-2026-114707.md): WordPress JetElements For Elementor plugin \<= 2.9.2.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2026-115608](https://cve.now/CVE-2026-115608.md): WordPress JetEngine plugin \<= 3.9.0 - SQL Injection vulnerability (CVSS 8.5) - [CVE-2026-111414](https://cve.now/CVE-2026-111414.md): WordPress JetElements For Elementor plugin \<= 2.9.2.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2026-110890](https://cve.now/CVE-2026-110890.md): WordPress JetSmartFilters plugin \<= 3.8.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2026-107870](https://cve.now/CVE-2026-107870.md): WordPress JetEngine plugin \<= 3.8.16 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1) - [CVE-2026-107867](https://cve.now/CVE-2026-107867.md): WordPress JetProductTables plugin \<= 1.2.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1) - [CVE-2026-107431](https://cve.now/CVE-2026-107431.md): WordPress JetFormBuilder plugin \<= 3.6.6 - Broken Access Control vulnerability (CVSS 7.5) - [CVE-2026-107865](https://cve.now/CVE-2026-107865.md): WordPress JetMenu plugin \<= 3.0.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2026-107866](https://cve.now/CVE-2026-107866.md): WordPress JetElements For Elementor plugin \<= 2.9.2.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2026-94667](https://cve.now/CVE-2026-94667.md): WordPress JetReviews plugin \<= 3.1.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2026-94661](https://cve.now/CVE-2026-94661.md): WordPress JetBlog plugin \<= 2.4.10 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1) - [CVE-2026-62049](https://cve.now/CVE-2026-62049.md): WordPress JetBlocks For Elementor plugin \<= 1.5.2.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2026-105879](https://cve.now/CVE-2026-105879.md): WordPress JetElements For Elementor plugin \<= 2.9.2.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2026-93875](https://cve.now/CVE-2026-93875.md): JetAppointment \<= 2.5.2.1 - Unauthenticated Stored Cross-Site Scripting via 'friendlyTime' Parameter (CVSS 7.2) - [CVE-2026-97237](https://cve.now/CVE-2026-97237.md): WordPress JetEngine plugin \<= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1) - [CVE-2026-84817](https://cve.now/CVE-2026-84817.md): WordPress JetFormBuilder plugin \<= 3.6.5.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1) - [CVE-2026-27347](https://cve.now/CVE-2026-27347.md): WordPress JetPopup plugin \<= 2.0.20.2 - Broken Access Control vulnerability (CVSS 5.3) - [CVE-2026-81760](https://cve.now/CVE-2026-81760.md): WordPress JetEngine plugin \<= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1) - [CVE-2026-61977](https://cve.now/CVE-2026-61977.md): WordPress JetSearch plugin \<= 3.6.1.2 - Sensitive Data Exposure vulnerability (CVSS 5.3) - [CVE-2026-61976](https://cve.now/CVE-2026-61976.md): WordPress JetBlocks For Elementor plugin \<= 1.5.0 - Sensitive Data Exposure vulnerability (CVSS 5.3) - [CVE-2026-61975](https://cve.now/CVE-2026-61975.md): WordPress JetReviews plugin \<= 3.0.1 - Sensitive Data Exposure vulnerability (CVSS 5.3) - [CVE-2026-49076](https://cve.now/CVE-2026-49076.md): WordPress JetEngine plugin \<= 3.8.9.1 - SQL Injection vulnerability (CVSS 9.3) - [CVE-2026-12360](https://cve.now/CVE-2026-12360.md): JetEngine \<= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint (CVSS 7.5) - [CVE-2026-42774](https://cve.now/CVE-2026-42774.md): WordPress JetEngine plugin \<= 3.8.8.1 - SQL Injection vulnerability (CVSS 9.3) - [CVE-2026-4352](https://cve.now/CVE-2026-4352.md): JetEngine \<= 3.8.6.1 - Unauthenticated SQL Injection via '\_cct\_search' Parameter (CVSS 7.5) - [CVE-2026-4662](https://cve.now/CVE-2026-4662.md): JetEngine \<= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered\_query' Parameter (CVSS 7.5) - [CVE-2026-32355](https://cve.now/CVE-2026-32355.md): WordPress JetEngine plugin \< 3.8.4.1 - Deserialization of untrusted data vulnerability (CVSS 8.8) - [CVE-2026-3496](https://cve.now/CVE-2026-3496.md): JetBooking \<= 4.0.3 - Unauthenticated SQL Injection via 'check\_in\_date' Parameter (CVSS 7.5) - [CVE-2026-28134](https://cve.now/CVE-2026-28134.md): WordPress JetEngine plugin \<= 3.7.2 - Remote Code Execution (RCE) vulnerability (CVSS 8.5) - [CVE-2025-68495](https://cve.now/CVE-2025-68495.md): WordPress JetEngine plugin \<= 3.8.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1) - [CVE-2026-24958](https://cve.now/CVE-2026-24958.md): WordPress JetElements For Elementor plugin \<= 2.7.12.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2025-67923](https://cve.now/CVE-2025-67923.md): WordPress JetEngine plugin \<= 3.7.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1) - [CVE-2025-69333](https://cve.now/CVE-2025-69333.md): WordPress JetEngine plugin \<= 3.8.1.1 - Broken Access Control vulnerability (CVSS 4.3) - [CVE-2025-68498](https://cve.now/CVE-2025-68498.md): WordPress JetTabs plugin \<= 2.2.12 - Broken Access Control vulnerability (CVSS 6.5) - [CVE-2025-68499](https://cve.now/CVE-2025-68499.md): WordPress JetTabs plugin \<= 2.2.12 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2025-68502](https://cve.now/CVE-2025-68502.md): WordPress JetPopup plugin \<= 2.0.20.1 - Insecure Direct Object References (IDOR) vulnerability (CVSS 4.3) - [CVE-2025-68503](https://cve.now/CVE-2025-68503.md): WordPress JetBlog plugin \<= 2.4.7 - Broken Access Control vulnerability (CVSS 6.5) - [CVE-2025-68504](https://cve.now/CVE-2025-68504.md): WordPress JetSearch plugin \<= 3.5.16 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2025-64355](https://cve.now/CVE-2025-64355.md): WordPress JetElements For Elementor plugin \<= 2.7.12 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2025-49939](https://cve.now/CVE-2025-49939.md): WordPress JetElements For Elementor plugin \<= 2.7.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2025-49938](https://cve.now/CVE-2025-49938.md): WordPress JetEngine plugin \<= 3.7.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2025-49934](https://cve.now/CVE-2025-49934.md): WordPress JetBlocks For Elementor plugin \<= 1.3.18 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2025-49933](https://cve.now/CVE-2025-49933.md): WordPress JetBlog plugin \<= 2.4.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2025-49932](https://cve.now/CVE-2025-49932.md): WordPress JetBlog plugin \<= 2.4.4.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2025-49931](https://cve.now/CVE-2025-49931.md): WordPress JetSearch plugin \<= 3.5.10 - SQL Injection vulnerability (CVSS 9.3) - [CVE-2025-49930](https://cve.now/CVE-2025-49930.md): WordPress JetSearch plugin \<= 3.5.10 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1) - [CVE-2025-49928](https://cve.now/CVE-2025-49928.md): WordPress JetWooBuilder plugin \<= 2.1.20 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2025-49927](https://cve.now/CVE-2025-49927.md): WordPress JetWooBuilder plugin \<= 2.1.20.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2025-49921](https://cve.now/CVE-2025-49921.md): WordPress JetReviews plugin \<= 3.0.0 - Local File Inclusion vulnerability (CVSS 7.5) - [CVE-2025-53194](https://cve.now/CVE-2025-53194.md): WordPress JetEngine \<= 3.7.0 - Remote Code Execution (RCE) Vulnerability (CVSS 8.5) - [CVE-2025-53195](https://cve.now/CVE-2025-53195.md): WordPress JetEngine plugin \<= 3.7.0 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5) - [CVE-2025-53196](https://cve.now/CVE-2025-53196.md): WordPress JetEngine \<= 3.7.0 - Sensitive Data Exposure Vulnerability (CVSS 6.5) - [CVE-2025-53983](https://cve.now/CVE-2025-53983.md): WordPress JetElements For Elementor \<= 2.7.7 - Sensitive Data Exposure Vulnerability (CVSS 6.5) - [CVE-2025-53985](https://cve.now/CVE-2025-53985.md): WordPress JetTabs \<= 2.2.9 - Sensitive Data Exposure Vulnerability (CVSS 6.5) - [CVE-2025-53987](https://cve.now/CVE-2025-53987.md): WordPress JetMenu \<= 2.4.11.1 - Sensitive Data Exposure Vulnerability (CVSS 6.5) - [CVE-2025-53988](https://cve.now/CVE-2025-53988.md): WordPress JetBlocks For Elementor \<= 1.3.18 - Sensitive Data Exposure Vulnerability (CVSS 6.5) - [CVE-2025-53992](https://cve.now/CVE-2025-53992.md): WordPress JetTricks \<= 1.5.4.1 - Sensitive Data Exposure Vulnerability (CVSS 6.5) - [CVE-2025-53993](https://cve.now/CVE-2025-53993.md): WordPress JetPopup plugin \<= 2.0.15 - Sensitive Data Exposure vulnerability (CVSS 6.5) - [CVE-2025-53998](https://cve.now/CVE-2025-53998.md): WordPress JetWooBuilder \<= 2.1.20 - Sensitive Data Exposure Vulnerability (CVSS 6.5) - [CVE-2025-54008](https://cve.now/CVE-2025-54008.md): WordPress JetSmartFilters \<= 3.6.7 - Sensitive Data Exposure Vulnerability (CVSS 6.5) - [CVE-2025-54749](https://cve.now/CVE-2025-54749.md): WordPress JetProductGallery Plugin \<= 2.2.0.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5) - [CVE-2025-55714](https://cve.now/CVE-2025-55714.md): WordPress JetElements For Elementor Plugin \<= 2.7.9 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5) - [CVE-2025-54688](https://cve.now/CVE-2025-54688.md): WordPress JetEngine Plugin plugin \<= 3.7.1.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5) - [CVE-2025-54687](https://cve.now/CVE-2025-54687.md): WordPress JetTabs Plugin plugin \<= 2.2.9.1 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5) - [CVE-2025-54009](https://cve.now/CVE-2025-54009.md): WordPress JetSmartFilters plugin \<= 3.6.8 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5) - [CVE-2025-53996](https://cve.now/CVE-2025-53996.md): WordPress JetSearch plugin \<= 3.5.10.1 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5) - [CVE-2025-53995](https://cve.now/CVE-2025-53995.md): WordPress JetPopup plugin \<= 2.0.15.1 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5) - [CVE-2025-53994](https://cve.now/CVE-2025-53994.md): WordPress JetPopup plugin \<= 2.0.15 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5) - [CVE-2025-53991](https://cve.now/CVE-2025-53991.md): WordPress JetTricks plugin \<= 1.5.4.1 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5) - [CVE-2025-53989](https://cve.now/CVE-2025-53989.md): WordPress JetBlocks For Elementor plugin \<= 1.3.19 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5) - [CVE-2025-53984](https://cve.now/CVE-2025-53984.md): WordPress JetTabs plugin \<= 2.2.9 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5) - [CVE-2025-53982](https://cve.now/CVE-2025-53982.md): WordPress JetElements For Elementor plugin \<= 2.7.7 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5) - [CVE-2025-39447](https://cve.now/CVE-2025-39447.md): WordPress JetElements For Elementor plugin \<= 2.7.4.1 - Broken Access Control Vulnerability (CVSS 7.5) - [CVE-2025-39449](https://cve.now/CVE-2025-39449.md): WordPress JetWooBuilder plugin \<= 2.1.18 - Broken Access Control Vulnerability (CVSS 7.5) - [CVE-2025-39451](https://cve.now/CVE-2025-39451.md): WordPress JetBlocks For Elementor plugin \<= 1.3.16 - Broken Access Control Vulnerability (CVSS 7.5) - [CVE-2025-39448](https://cve.now/CVE-2025-39448.md): WordPress JetElements For Elementor plugin \<= 2.7.4.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2025-39450](https://cve.now/CVE-2025-39450.md): WordPress JetTabs plugin \<= 2.2.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2025-39396](https://cve.now/CVE-2025-39396.md): WordPress JetReviews plugin \<= 2.3.6 - Local File Inclusion vulnerability (CVSS 7.5) - [CVE-2025-26953](https://cve.now/CVE-2025-26953.md): WordPress JetMenu plugin \<= 2.4.9 - Broken Access Control Vulnerability (CVSS 7.5) - [CVE-2025-26870](https://cve.now/CVE-2025-26870.md): WordPress JetEngine plugin \<= 3.6.4.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2025-26958](https://cve.now/CVE-2025-26958.md): WordPress JetBlog plugin \<= 2.4.3 - Broken Access Control Vulnerability (CVSS 7.5) - [CVE-2025-26944](https://cve.now/CVE-2025-26944.md): WordPress JetPopup plugin \<= 2.0.11 - Broken Access Control Vulnerability (CVSS 7.5) - [CVE-2025-26942](https://cve.now/CVE-2025-26942.md): WordPress JetTricks plugin \<= 1.5.1 - Broken Access Control Vulnerability (CVSS 7.5) - [CVE-2025-26744](https://cve.now/CVE-2025-26744.md): WordPress JetBlog plugin \<= 2.4.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2025-22279](https://cve.now/CVE-2025-22279.md): WordPress JetCompareWishlist plugin \<= 1.5.9 - Local File Inclusion vulnerability (CVSS 7.5) - [CVE-2025-30963](https://cve.now/CVE-2025-30963.md): WordPress JetSmartFilters plugin \<= 3.6.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2025-31412](https://cve.now/CVE-2025-31412.md): WordPress JetProductGallery plugin \<= 2.1.22 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2025-31016](https://cve.now/CVE-2025-31016.md): WordPress JetWooBuilder plugin \<= 2.1.18 - Local File Inclusion vulnerability (CVSS 7.5) - [CVE-2025-30987](https://cve.now/CVE-2025-30987.md): WordPress JetBlocks For Elementor plugin \<= 1.3.16 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2025-31043](https://cve.now/CVE-2025-31043.md): WordPress JetSearch plugin \<= 3.5.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2025-0371](https://cve.now/CVE-2025-0371.md): Jet Elements \<= 2.7.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets (CVSS 6.4) - [CVE-2025-0369](https://cve.now/CVE-2025-0369.md): Jet Engine \<= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via list\_tag Parameter (CVSS 6.4) - [CVE-2023-48758](https://cve.now/CVE-2023-48758.md): WordPress JetEngine plugin \<= 3.2.4 - Broken Access Control vulnerability (CVSS 7.1) - [CVE-2024-43221](https://cve.now/CVE-2024-43221.md): WordPress JetGridBuilder plugin \<= 1.1.2 - Local File Inclusion vulnerability (CVSS 8.5) - [CVE-2024-7144](https://cve.now/CVE-2024-7144.md): JetElements \<= 2.6.20 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4) - [CVE-2024-7145](https://cve.now/CVE-2024-7145.md): JetElements \<= 2.6.20 - Authenticated (Contributor+) Arbitrary Local File Inclusion (CVSS 8.8) - [CVE-2024-7146](https://cve.now/CVE-2024-7146.md): JetTabs \<= 2.2.3 - Authenticated (Contributor+) Arbitrary Local File Inclusion (CVSS 8.8) - [CVE-2024-7136](https://cve.now/CVE-2024-7136.md): JetSearch \<= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4) - [CVE-2024-7147](https://cve.now/CVE-2024-7147.md): JetBlocks \<= 1.3.12 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4) - [CVE-2024-38772](https://cve.now/CVE-2024-38772.md): WordPress JetWidgets for Elementor and WooCommerce plugin \<= 1.1.7 - Contributor+ Limited Local File Inclusion vulnerability (CVSS 6.5) - [CVE-2024-37497](https://cve.now/CVE-2024-37497.md): WordPress JetThemeCore plugin \< 2.2.1 - Subscriber+ Arbitrary File Deletion vulnerability (CVSS 7.7) - [CVE-2023-48759](https://cve.now/CVE-2023-48759.md): WordPress JetElements For Elementor plugin \<= 2.6.13 - Unauthenticated Arbitrary Attachment Download vulnerability (CVSS 7.5) - [CVE-2023-48760](https://cve.now/CVE-2023-48760.md): WordPress JetElements For Elementor plugin \<= 2.6.13 - Unauthenticated Broken Access Control vulnerability (CVSS 8.2) - [CVE-2023-48761](https://cve.now/CVE-2023-48761.md): WordPress JetElements For Elementor plugin \<= 2.6.13 - Broken Access Control vulnerability (CVSS 6.3) - [CVE-2023-48757](https://cve.now/CVE-2023-48757.md): WordPress JetEngine plugin \<= 3.2.4 - Privilege Escalation vulnerability (CVSS 8.8) - [CVE-2023-37866](https://cve.now/CVE-2023-37866.md): WordPress JetFormBuilder plugin \<= 3.0.8 - Authenticated Privilege Escalation vulnerability (CVSS 7.2) - [CVE-2023-48763](https://cve.now/CVE-2023-48763.md): WordPress JetFormBuilder plugin \<= 3.1.4 - Content Injection vulnerability (CVSS 5.3) - [CVE-2023-39157](https://cve.now/CVE-2023-39157.md): WordPress JetElements For Elementor Plugin \<= 2.6.10 is vulnerable to Remote Code Execution (RCE) (CVSS 9.0) - [CVE-2023-48762](https://cve.now/CVE-2023-48762.md): WordPress JetElements For Elementor Plugin \<= 2.6.13 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 6.3) - [CVE-2023-48756](https://cve.now/CVE-2023-48756.md): WordPress JetBlocks For Elementor Plugin \<= 1.3.8 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1) - [CVE-2023-33212](https://cve.now/CVE-2023-33212.md): WordPress JetFormBuilder Plugin \<= 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/vendors/crocoblock Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.