JetSearch vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

JE

Product

JetSearch

by Crocoblock · last CVE Jul 13, 2026

7

CVEs

0

On KEV

9.3

Max CVSS

0

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 1High 1Medium 5Low 0

Severity

All severities7 Critical1 High1 Medium5 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add JetSearch to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-49931	9.3	1%	Oct 22	WordPress JetSearch plugin <= 3.5.10 - SQL Injection vulnerability Affected: through 3.5.10
CVE-2025-49930	7.1	0%	Oct 22	WordPress JetSearch plugin <= 3.5.10 - Cross Site Scripting (XSS) vulnerability Affected: through 3.5.10
CVE-2025-68504	6.5	0%	Dec 29	WordPress JetSearch plugin <= 3.5.16 - Cross Site Scripting (XSS) vulnerability Affected: through 3.5.16
CVE-2025-53996	6.5	0%	Jul 16	WordPress JetSearch plugin <= 3.5.10.1 - Cross Site Scripting (XSS) Vulnerability Affected: through 3.5.10.1
CVE-2025-31043	6.5	0%	Mar 31	WordPress JetSearch plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerability Affected: through 3.5.7
CVE-2024-7136	6.4	0%	Aug 16	JetSearch <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 3.5.2
CVE-2026-61977	5.3	0%	Jul 13	WordPress JetSearch plugin <= 3.6.1.2 - Sensitive Data Exposure vulnerability Affected: through 3.6.1.2