CR
Vendor
Crocoblock
133
CVEs
0
On KEV
20
New 30D
Products
JE9.8
JetEngine
Crocoblock
27 CVEs0 on KEV5 new
JF9.8
JetElements For Elementor
Crocoblock
18 CVEs0 on KEV5 new
JE6.5
JetSmartFilters
Crocoblock
6 CVEs0 on KEV3 new
JF7.5
JetBlocks for Elementor
Crocoblock
9 CVEs0 on KEV1 new
JE7.5
JetBlog
Crocoblock
6 CVEs0 on KEV1 new
JE8.8
JetFormBuilder
Crocoblock
5 CVEs0 on KEV1 new
JE7.5
JetReviews
Crocoblock
4 CVEs0 on KEV1 new
JE7.5
JetMenu
Crocoblock
3 CVEs0 on KEV1 new
JE7.2
JetAppointment
Crocoblock
1 CVEs0 on KEV1 new
JE7.1
JetProductTables
Crocoblock
1 CVEs0 on KEV1 new
JE9.8
JetElements
Crocoblock
8 CVEs0 on KEV0 new
JF6.5
Jetwidgets For Elementor
Crocoblock
8 CVEs0 on KEV0 new
JE9.3
JetSearch
Crocoblock
7 CVEs0 on KEV0 new
JE8.8
JetTabs
Crocoblock
7 CVEs0 on KEV0 new
JE7.5
JetPopup
Crocoblock
6 CVEs0 on KEV0 new
JE7.5
JetWooBuilder
Crocoblock
5 CVEs0 on KEV0 new
JE7.5
JetTricks
Crocoblock
3 CVEs0 on KEV0 new
JE6.5
JetProductGallery
Crocoblock
2 CVEs0 on KEV0 new
JE7.5
JetBooking
Crocoblock
1 CVEs0 on KEV0 new
JE7.5
JetCompareWishlist
Crocoblock
1 CVEs0 on KEV0 new
JF8.8
Jetengine For Elementor
Crocoblock
1 CVEs0 on KEV0 new
JE8.5
JetGridBuilder
Crocoblock
1 CVEs0 on KEV0 new
JF8.8
Jettabs For Elementor
Crocoblock
1 CVEs0 on KEV0 new
JE7.7
JetThemeCore
Crocoblock
1 CVEs0 on KEV0 new
JF6.5
JetWidgets for Elementor and WooCommerce
Crocoblock
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-39737 New | JF JetElements For Elementor Crocoblock | 6.5 | Oct 29 | WordPress JetElements For Elementor plugin <= 2.9.2.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-39736 New | JE JetEngine Crocoblock | 8.5 | Oct 29 | WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerability |
| CVE-2026-116857 New | JE JetSmartFilters Crocoblock | 6.5 | Oct 29 | WordPress JetSmartFilters plugin <= 3.8.6.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-39735 New | JE JetEngine Crocoblock | 6.5 | Oct 29 | WordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerability |
| CVE-2026-114708 New | JE JetSmartFilters Crocoblock | 6.5 | Oct 26 | WordPress JetSmartFilters plugin <= 3.8.6.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-114707 New | JF JetElements For Elementor Crocoblock | 6.5 | Oct 26 | WordPress JetElements For Elementor plugin <= 2.9.2.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-115608 New | JE JetEngine Crocoblock | 8.5 | Oct 26 | WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability |
| CVE-2026-111414 | JF JetElements For Elementor Crocoblock | 6.5 | Oct 19 | WordPress JetElements For Elementor plugin <= 2.9.2.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-110890 | JE JetSmartFilters Crocoblock | 6.5 | Oct 15 | WordPress JetSmartFilters plugin <= 3.8.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-107870 | JE JetEngine Crocoblock | 7.1 | Oct 14 | WordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-107867 | JE JetProductTables Crocoblock | 7.1 | Oct 14 | WordPress JetProductTables plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-107431 | JE JetFormBuilder Crocoblock | 7.5 | Oct 14 | WordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerability |
| CVE-2026-107865 | JE JetMenu Crocoblock | 6.5 | Oct 12 | WordPress JetMenu plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-107866 | JF JetElements For Elementor Crocoblock | 6.5 | Oct 12 | WordPress JetElements For Elementor plugin <= 2.9.2.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-94667 | JE JetReviews Crocoblock | 6.5 | Oct 9 | WordPress JetReviews plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-94661 | JE JetBlog Crocoblock | 7.1 | Oct 9 | WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-62049 | JF JetBlocks For Elementor Crocoblock | 6.5 | Oct 9 | WordPress JetBlocks For Elementor plugin <= 1.5.2.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-105879 | JF JetElements For Elementor Crocoblock | 6.5 | Oct 6 | WordPress JetElements For Elementor plugin <= 2.9.2.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-93875 | JE JetAppointment Crocoblock | 7.2 | Oct 2 | JetAppointment <= 2.5.2.1 - Unauthenticated Stored Cross-Site Scripting via 'friendlyTime' Parameter |
| CVE-2026-97237 | JE JetEngine Crocoblock | 7.1 | Sep 30 | WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-84817 | JE JetFormBuilder Crocoblock | 7.1 | Sep 8 | WordPress JetFormBuilder plugin <= 3.6.5.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-27347 | JE JetPopup Crocoblock | 5.3 | Sep 4 | WordPress JetPopup plugin <= 2.0.20.2 - Broken Access Control vulnerability |
| CVE-2026-81760 | JE JetEngine Crocoblock | 7.1 | Aug 28 | WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-61977 | JE JetSearch Crocoblock | 5.3 | Jul 13 | WordPress JetSearch plugin <= 3.6.1.2 - Sensitive Data Exposure vulnerability |
| CVE-2026-61976 | JF JetBlocks For Elementor Crocoblock | 5.3 | Jul 13 | WordPress JetBlocks For Elementor plugin <= 1.5.0 - Sensitive Data Exposure vulnerability |
| CVE-2026-61975 | JE JetReviews Crocoblock | 5.3 | Jul 13 | WordPress JetReviews plugin <= 3.0.1 - Sensitive Data Exposure vulnerability |
| CVE-2026-49076 | JE JetEngine Crocoblock | 9.3 | Jun 17 | WordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerability |
| CVE-2026-12360 | JE JetEngine Crocoblock | 7.5 | Jun 17 | JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint |
| CVE-2026-42774 | JE JetEngine Crocoblock | 9.3 | May 25 | WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerability |
| CVE-2026-4352 | JE JetEngine Crocoblock | 7.5 | Apr 14 | JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' Parameter |
| CVE-2026-4662 | JE JetEngine Crocoblock | 7.5 | Mar 24 | JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' Parameter |
| CVE-2026-32355 | JE JetEngine Crocoblock | 8.8 | Mar 13 | WordPress JetEngine plugin < 3.8.4.1 - Deserialization of untrusted data vulnerability |
| CVE-2026-3496 | JE JetBooking Crocoblock | 7.5 | Mar 11 | JetBooking <= 4.0.3 - Unauthenticated SQL Injection via 'check_in_date' Parameter |
| CVE-2026-28134 | JE JetEngine Crocoblock | 8.5 | Mar 5 | WordPress JetEngine plugin <= 3.7.2 - Remote Code Execution (RCE) vulnerability |
| CVE-2025-68495 | JE JetEngine Crocoblock | 7.1 | Feb 20 | WordPress JetEngine plugin <= 3.8.0 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2026-24958 | JF JetElements For Elementor Crocoblock | 6.5 | Feb 3 | WordPress JetElements For Elementor plugin <= 2.7.12.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-67923 | JE JetEngine Crocoblock | 7.1 | Jan 22 | WordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-69333 | JE JetEngine Crocoblock | 4.3 | Jan 7 | WordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerability |
| CVE-2025-68498 | JE JetTabs Crocoblock | 6.5 | Dec 29 | WordPress JetTabs plugin <= 2.2.12 - Broken Access Control vulnerability |
| CVE-2025-68499 | JE JetTabs Crocoblock | 6.5 | Dec 29 | WordPress JetTabs plugin <= 2.2.12 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-68502 | JE JetPopup Crocoblock | 4.3 | Dec 29 | WordPress JetPopup plugin <= 2.0.20.1 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2025-68503 | JE JetBlog Crocoblock | 6.5 | Dec 29 | WordPress JetBlog plugin <= 2.4.7 - Broken Access Control vulnerability |
| CVE-2025-68504 | JE JetSearch Crocoblock | 6.5 | Dec 29 | WordPress JetSearch plugin <= 3.5.16 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-64355 | JF JetElements For Elementor Crocoblock | 6.5 | Dec 18 | WordPress JetElements For Elementor plugin <= 2.7.12 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-49939 | JF JetElements For Elementor Crocoblock | 6.5 | Oct 22 | WordPress JetElements For Elementor plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-49938 | JE JetEngine Crocoblock | 6.5 | Oct 22 | WordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-49934 | JF JetBlocks For Elementor Crocoblock | 6.5 | Oct 22 | WordPress JetBlocks For Elementor plugin <= 1.3.18 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-49933 | JE JetBlog Crocoblock | 6.5 | Oct 22 | WordPress JetBlog plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-49932 | JE JetBlog Crocoblock | 6.5 | Oct 22 | WordPress JetBlog plugin <= 2.4.4.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-49931 | JE JetSearch Crocoblock | 9.3 | Oct 22 | WordPress JetSearch plugin <= 3.5.10 - SQL Injection vulnerability |
| CVE-2025-49930 | JE JetSearch Crocoblock | 7.1 | Oct 22 | WordPress JetSearch plugin <= 3.5.10 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-49928 | JE JetWooBuilder Crocoblock | 6.5 | Oct 22 | WordPress JetWooBuilder plugin <= 2.1.20 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-49927 | JE JetWooBuilder Crocoblock | 6.5 | Oct 22 | WordPress JetWooBuilder plugin <= 2.1.20.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-49921 | JE JetReviews Crocoblock | 7.5 | Oct 22 | WordPress JetReviews plugin <= 3.0.0 - Local File Inclusion vulnerability |
| CVE-2025-53194 | JE JetEngine Crocoblock | 8.5 | Aug 20 | WordPress JetEngine <= 3.7.0 - Remote Code Execution (RCE) Vulnerability |
| CVE-2025-53195 | JE JetEngine Crocoblock | 6.5 | Aug 20 | WordPress JetEngine plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-53196 | JE JetEngine Crocoblock | 6.5 | Aug 20 | WordPress JetEngine <= 3.7.0 - Sensitive Data Exposure Vulnerability |
| CVE-2025-53983 | JF JetElements For Elementor Crocoblock | 6.5 | Aug 20 | WordPress JetElements For Elementor <= 2.7.7 - Sensitive Data Exposure Vulnerability |
| CVE-2025-53985 | JE JetTabs Crocoblock | 6.5 | Aug 20 | WordPress JetTabs <= 2.2.9 - Sensitive Data Exposure Vulnerability |
| CVE-2025-53987 | JE JetMenu Crocoblock | 6.5 | Aug 20 | WordPress JetMenu <= 2.4.11.1 - Sensitive Data Exposure Vulnerability |
