Login Request a demo
JE
Product
JetEngine
by Crocoblock · last CVE Oct 29, 2026
27
CVEs
0
On KEV
9.8
Max CVSS
5
New 30D
Vulnerabilities27In the news0Timeline
Severity mix
Critical 3High 15Medium 9Low 0
Severity
All severities27Critical3High15Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add JetEngine to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-39735
New
6.5–Oct 29
WordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerability
Affected: through 3.9.0.1
CVE-2025-49938
6.5
0%
Oct 22
WordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.7.3
CVE-2025-53195
6.5
0%
Aug 20
WordPress JetEngine plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability
Affected: through 3.7.0
CVE-2025-53196
6.5
1%
Aug 20
WordPress JetEngine <= 3.7.0 - Sensitive Data Exposure Vulnerability
Affected: through 3.7.0
CVE-2025-54688
6.5
0%
Aug 14
WordPress JetEngine Plugin plugin <= 3.7.1.2 - Cross Site Scripting (XSS) Vulnerability
Affected: through 3.7.1.2
CVE-2025-26870
6.5
0%
Apr 15
WordPress JetEngine plugin <= 3.6.4.1 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.6.4.1
CVE-2025-0369
6.4
0%
Jan 18
Jet Engine <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via list_tag Parameter
Affected: through 3.6.2
CVE-2021-38607
5.4
1%
Aug 16
Crocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input
Affected: before 2.6.1
CVE-2025-69333
4.3
0%
Jan 7
WordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerability
Affected: through 3.8.1.1
Showing 9