Crocoblock vulnerabilities
126 CVEs and advisories name Crocoblock as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-39448WordPress JetElements For Elementor plugin <= 2.7.4.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-39450WordPress JetTabs plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-39396WordPress JetReviews plugin <= 2.3.6 - Local File Inclusion vulnerability
- CVE-2025-26953WordPress JetMenu plugin <= 2.4.9 - Broken Access Control Vulnerability
- CVE-2025-26870WordPress JetEngine plugin <= 3.6.4.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-26958WordPress JetBlog plugin <= 2.4.3 - Broken Access Control Vulnerability
- CVE-2025-26944WordPress JetPopup plugin <= 2.0.11 - Broken Access Control Vulnerability
- CVE-2025-26942WordPress JetTricks plugin <= 1.5.1 - Broken Access Control Vulnerability
- CVE-2025-26744WordPress JetBlog plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-22279WordPress JetCompareWishlist plugin <= 1.5.9 - Local File Inclusion vulnerability
- CVE-2025-30963WordPress JetSmartFilters plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-31412WordPress JetProductGallery plugin <= 2.1.22 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-31016WordPress JetWooBuilder plugin <= 2.1.18 - Local File Inclusion vulnerability
- CVE-2025-30987WordPress JetBlocks For Elementor plugin <= 1.3.16 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-31043WordPress JetSearch plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-0371Jet Elements <= 2.7.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
- CVE-2025-0369Jet Engine <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via list_tag Parameter
- CVE-2023-48758WordPress JetEngine plugin <= 3.2.4 - Broken Access Control vulnerability
- CVE-2024-43221WordPress JetGridBuilder plugin <= 1.1.2 - Local File Inclusion vulnerability
- CVE-2024-7144JetElements <= 2.6.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-7145JetElements <= 2.6.20 - Authenticated (Contributor+) Arbitrary Local File Inclusion
- CVE-2024-7146JetTabs <= 2.2.3 - Authenticated (Contributor+) Arbitrary Local File Inclusion
- CVE-2024-7136JetSearch <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-7147JetBlocks <= 1.3.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-38772WordPress JetWidgets for Elementor and WooCommerce plugin <= 1.1.7 - Contributor+ Limited Local File Inclusion vulnerability
- CVE-2024-37497WordPress JetThemeCore plugin < 2.2.1 - Subscriber+ Arbitrary File Deletion vulnerability
- CVE-2023-48759WordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Arbitrary Attachment Download vulnerability
- CVE-2023-48760WordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Broken Access Control vulnerability
- CVE-2023-48761WordPress JetElements For Elementor plugin <= 2.6.13 - Broken Access Control vulnerability
- CVE-2023-48757WordPress JetEngine plugin <= 3.2.4 - Privilege Escalation vulnerability