CR
Vendor
Crocoblock
25 products with CVEs on record
133
CVEs
0
On KEV
20
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-39737
New
JF
JetElements For Elementor
Crocoblock
6.5–Oct 29WordPress JetElements For Elementor plugin <= 2.9.2.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39736
New
JE
JetEngine
Crocoblock
8.5–Oct 29WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerability
CVE-2026-116857
New
JE
JetSmartFilters
Crocoblock
6.5–Oct 29WordPress JetSmartFilters plugin <= 3.8.6.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39735
New
JE
JetEngine
Crocoblock
6.5–Oct 29WordPress JetEngine plugin <= 3.9.0.1 - Broken Access Control vulnerability
CVE-2026-114708
New
JE
JetSmartFilters
Crocoblock
6.5
0%
Oct 26WordPress JetSmartFilters plugin <= 3.8.6.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-114707
New
JF
JetElements For Elementor
Crocoblock
6.5
0%
Oct 26WordPress JetElements For Elementor plugin <= 2.9.2.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-115608
New
JE
JetEngine
Crocoblock
8.5
0%
Oct 26WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerability
CVE-2026-111414
JF
JetElements For Elementor
Crocoblock
6.5
0%
Oct 19WordPress JetElements For Elementor plugin <= 2.9.2.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-110890
JE
JetSmartFilters
Crocoblock
6.5
0%
Oct 15WordPress JetSmartFilters plugin <= 3.8.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-107870
JE
JetEngine
Crocoblock
7.1
0%
Oct 14WordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability
CVE-2026-107867
JE
JetProductTables
Crocoblock
7.1
0%
Oct 14WordPress JetProductTables plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-107431
JE
JetFormBuilder
Crocoblock
7.5
0%
Oct 14WordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerability
CVE-2026-107865
JE
JetMenu
Crocoblock
6.5
0%
Oct 12WordPress JetMenu plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-107866
JF
JetElements For Elementor
Crocoblock
6.5
0%
Oct 12WordPress JetElements For Elementor plugin <= 2.9.2.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-94667
JE
JetReviews
Crocoblock
6.5
0%
Oct 9WordPress JetReviews plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-94661
JE
JetBlog
Crocoblock
7.1
0%
Oct 9WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62049
JF
JetBlocks For Elementor
Crocoblock
6.5
0%
Oct 9WordPress JetBlocks For Elementor plugin <= 1.5.2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-105879
JF
JetElements For Elementor
Crocoblock
6.5
0%
Oct 6WordPress JetElements For Elementor plugin <= 2.9.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-93875
JE
JetAppointment
Crocoblock
7.2
0%
Oct 2JetAppointment <= 2.5.2.1 - Unauthenticated Stored Cross-Site Scripting via 'friendlyTime' Parameter
CVE-2026-97237
JE
JetEngine
Crocoblock
7.1
0%
Sep 30WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-84817
JE
JetFormBuilder
Crocoblock
7.1
0%
Sep 8WordPress JetFormBuilder plugin <= 3.6.5.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27347
JE
JetPopup
Crocoblock
5.3
0%
Sep 4WordPress JetPopup plugin <= 2.0.20.2 - Broken Access Control vulnerability
CVE-2026-81760
JE
JetEngine
Crocoblock
7.1
0%
Aug 28WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-61977
JE
JetSearch
Crocoblock
5.3
0%
Jul 13WordPress JetSearch plugin <= 3.6.1.2 - Sensitive Data Exposure vulnerability
CVE-2026-61976
JF
JetBlocks For Elementor
Crocoblock
5.3
0%
Jul 13WordPress JetBlocks For Elementor plugin <= 1.5.0 - Sensitive Data Exposure vulnerability
CVE-2026-61975
JE
JetReviews
Crocoblock
5.3
0%
Jul 13WordPress JetReviews plugin <= 3.0.1 - Sensitive Data Exposure vulnerability
CVE-2026-49076
JE
JetEngine
Crocoblock
9.3
0%
Jun 17WordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerability
CVE-2026-12360
JE
JetEngine
Crocoblock
7.5
0%
Jun 17JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint
CVE-2026-42774
JE
JetEngine
Crocoblock
9.3
0%
May 25WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerability
CVE-2026-4352
JE
JetEngine
Crocoblock
7.5
0%
Apr 14JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' Parameter
CVE-2026-4662
JE
JetEngine
Crocoblock
7.5
0%
Mar 24JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' Parameter
CVE-2026-32355
JE
JetEngine
Crocoblock
8.8
0%
Mar 13WordPress JetEngine plugin < 3.8.4.1 - Deserialization of untrusted data vulnerability
CVE-2026-3496
JE
JetBooking
Crocoblock
7.5
0%
Mar 11JetBooking <= 4.0.3 - Unauthenticated SQL Injection via 'check_in_date' Parameter
CVE-2026-28134
JE
JetEngine
Crocoblock
8.5
0%
Mar 5WordPress JetEngine plugin <= 3.7.2 - Remote Code Execution (RCE) vulnerability
CVE-2025-68495
JE
JetEngine
Crocoblock
7.1
0%
Feb 20WordPress JetEngine plugin <= 3.8.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-24958
JF
JetElements For Elementor
Crocoblock
6.5
0%
Feb 3WordPress JetElements For Elementor plugin <= 2.7.12.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67923
JE
JetEngine
Crocoblock
7.1
0%
Jan 22WordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-69333
JE
JetEngine
Crocoblock
4.3
0%
Jan 7WordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerability
CVE-2025-68498
JE
JetTabs
Crocoblock
6.5
0%
Dec 29WordPress JetTabs plugin <= 2.2.12 - Broken Access Control vulnerability
CVE-2025-68499
JE
JetTabs
Crocoblock
6.5
0%
Dec 29WordPress JetTabs plugin <= 2.2.12 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68502
JE
JetPopup
Crocoblock
4.3
0%
Dec 29WordPress JetPopup plugin <= 2.0.20.1 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-68503
JE
JetBlog
Crocoblock
6.5
0%
Dec 29WordPress JetBlog plugin <= 2.4.7 - Broken Access Control vulnerability
CVE-2025-68504
JE
JetSearch
Crocoblock
6.5
0%
Dec 29WordPress JetSearch plugin <= 3.5.16 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64355
JF
JetElements For Elementor
Crocoblock
6.5
0%
Dec 18WordPress JetElements For Elementor plugin <= 2.7.12 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49939
JF
JetElements For Elementor
Crocoblock
6.5
0%
Oct 22WordPress JetElements For Elementor plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49938
JE
JetEngine
Crocoblock
6.5
0%
Oct 22WordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49934
JF
JetBlocks For Elementor
Crocoblock
6.5
0%
Oct 22WordPress JetBlocks For Elementor plugin <= 1.3.18 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49933
JE
JetBlog
Crocoblock
6.5
0%
Oct 22WordPress JetBlog plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49932
JE
JetBlog
Crocoblock
6.5
0%
Oct 22WordPress JetBlog plugin <= 2.4.4.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49931
JE
JetSearch
Crocoblock
9.3
1%
Oct 22WordPress JetSearch plugin <= 3.5.10 - SQL Injection vulnerability
CVE-2025-49930
JE
JetSearch
Crocoblock
7.1
0%
Oct 22WordPress JetSearch plugin <= 3.5.10 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49928
JE
JetWooBuilder
Crocoblock
6.5
0%
Oct 22WordPress JetWooBuilder plugin <= 2.1.20 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49927
JE
JetWooBuilder
Crocoblock
6.5
0%
Oct 22WordPress JetWooBuilder plugin <= 2.1.20.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49921
JE
JetReviews
Crocoblock
7.5
0%
Oct 22WordPress JetReviews plugin <= 3.0.0 - Local File Inclusion vulnerability
CVE-2025-53194
JE
JetEngine
Crocoblock
8.5
0%
Aug 20WordPress JetEngine <= 3.7.0 - Remote Code Execution (RCE) Vulnerability
CVE-2025-53195
JE
JetEngine
Crocoblock
6.5
0%
Aug 20WordPress JetEngine plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-53196
JE
JetEngine
Crocoblock
6.5
1%
Aug 20WordPress JetEngine <= 3.7.0 - Sensitive Data Exposure Vulnerability
CVE-2025-53983
JF
JetElements For Elementor
Crocoblock
6.5
0%
Aug 20WordPress JetElements For Elementor <= 2.7.7 - Sensitive Data Exposure Vulnerability
CVE-2025-53985
JE
JetTabs
Crocoblock
6.5
0%
Aug 20WordPress JetTabs <= 2.2.9 - Sensitive Data Exposure Vulnerability
CVE-2025-53987
JE
JetMenu
Crocoblock
6.5
0%
Aug 20WordPress JetMenu <= 2.4.11.1 - Sensitive Data Exposure Vulnerability