Threat database

112 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.2%	CVE-2026-66572JetBlog · Cross-site Scripting Medium6.5EPSS 0.2%2026-09-17CVE Database V5CVE-2026-66572 Contributor Cross Site Scripting (XSS) in JetBlog <= 2.4.10 versions. EPSS 0.2%Vulnerability Crocoblock. Jetimpex Inc.#cwe-79	CVE Database V5	2026-09-17
High	7.1	EPSS 0.3%	CVE-2026-84817JetFormBuilder · Cross-site Scripting High7.1EPSS 0.3%2026-09-08CVE Database V5CVE-2026-84817 Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.1 versions. EPSS 0.3%Vulnerability Crocoblock #cwe-79	CVE Database V5	2026-09-08
Medium	5.3	EPSS 0.3%	CVE-2026-27347JetPopup · Missing Authorization Medium5.3EPSS 0.3%2026-09-04GCVE DatabaseCVE-2026-27347 CVE-2026-27347 is a missing authorization vulnerability in Crocoblock JetPopup that allows exploitation of incorrectly configured access control security levels. The issue affects versions up to 2.0.20.2. The vulnerability has a medium severity with a CVSS score of 5.3. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time. EPSS 0.3%Vulnerability Crocoblock #cwe-862 #ghsa-669m-vjx9-jv4x	GCVE Database	2026-09-04
High	7.1	EPSS 0.3%	CVE-2026-81760JetEngine · Cross-site Scripting High7.1EPSS 0.3%2026-08-28CVE Database V5CVE-2026-81760 CVE-2026-81760 is a high-severity reflected cross-site scripting (XSS) vulnerability in Crocoblock JetEngine. It involves improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts. The vulnerability affects JetEngine versions up to 3.8.14.2. No official patch or remediation guidance is currently available. EPSS 0.3%Vulnerability Crocoblock #cwe-79	CVE Database V5	2026-08-28
High	7.1	EPSS 0.3%	CVE-2026-66581JetEngine · Cross-site Scripting High7.1EPSS 0.3%2026-08-20CVE Database V5CVE-2026-66581 CVE-2026-66581 is a high severity unauthenticated cross-site scripting (XSS) vulnerability in JetEngine by Crocoblock. Jetimpex Inc., affecting versions up to and including 3.8.14.1. This vulnerability allows an attacker to inject malicious scripts during web page generation due to improper input neutralization. EPSS 0.3%Vulnerability Crocoblock. Jetimpex Inc.#cwe-79	CVE Database V5	2026-08-20
Critical	9.8	EPSS 0.9%	CVE-2026-66613JetEngine · Improper Neutralization of Special Elements Used in a Template Engine Critical9.8EPSS 0.9%2026-08-19CVE Database V5CVE-2026-66613 CVE-2026-66613 is a critical vulnerability in JetEngine by Crocoblock. Jetimpex Inc. It allows unauthenticated remote code execution (RCE) in versions up to and including 3.8.14 due to improper neutralization of special elements in the template engine. EPSS 0.9%Vulnerability Crocoblock. Jetimpex Inc.#cwe-1336 #ghsa-wrpq-j7q3-24j7	CVE Database V5	2026-08-19
Critical	9.3	EPSS 0.4%	CVE-2026-73365JetAppointment · SQL Injection Critical9.3EPSS 0.4%2026-08-18CVE Database V5CVE-2026-73365 Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions. EPSS 0.4%Vulnerability Crocoblock. Jetimpex Inc.#cwe-89	CVE Database V5	2026-08-18
High	7.1	EPSS 0.3%	CVE-2026-28082JetEngine · Cross-site Scripting High7.1EPSS 0.3%2026-08-06CVE Database V5CVE-2026-28082 CVE-2026-28082 is a high-severity unauthenticated cross-site scripting (XSS) vulnerability in JetEngine by Crocoblock. Jetimpex Inc. It affects versions up to and including 3.8.13.1. The vulnerability allows improper neutralization of input during web page generation, potentially leading to reflected XSS attacks. There is no official patch or vendor advisory confirming remediation at this time. EPSS 0.3%Vulnerability Crocoblock. Jetimpex Inc.#cwe-79 #ghsa-4wv6-hfwf-hgxc	CVE Database V5	2026-08-06
Medium	5.3	EPSS 0.3%	CVE-2026-65468JetBooking · Missing Authorization Medium5.3EPSS 0.3%2026-07-23CVE Database V5CVE-2026-65468 Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions. EPSS 0.3%Vulnerability Crocoblock. Jetimpex Inc.#cwe-862	CVE Database V5	2026-07-23
Medium	4.9	EPSS 0.2%	CVE-2026-65467JetEngine · Server-Side Request Forgery (SSRF) Medium4.9EPSS 0.2%2026-07-23CVE Database V5CVE-2026-65467 Contributor Server Side Request Forgery (SSRF) in JetEngine <= 3.8.11 versions. EPSS 0.2%Vulnerability Crocoblock. Jetimpex Inc.#cwe-918	CVE Database V5	2026-07-23
Medium	4.9	EPSS 0.2%	CVE-2026-65466JetBooking · Server-Side Request Forgery (SSRF) Medium4.9EPSS 0.2%2026-07-23CVE Database V5CVE-2026-65466 Custom role Server Side Request Forgery (SSRF) in JetBooking <= 4.1.2 versions. EPSS 0.2%Vulnerability Crocoblock. Jetimpex Inc.#cwe-918	CVE Database V5	2026-07-23
Medium	6.5	EPSS 0.2%	CVE-2026-65465JetElements For Elementor · Cross-site Scripting Medium6.5EPSS 0.2%2026-07-23CVE Database V5CVE-2026-65465 Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.1.1 versions. EPSS 0.2%Vulnerability Crocoblock. Jetimpex Inc.#cwe-79	CVE Database V5	2026-07-23
Medium	5.3	EPSS 0.3%	CVE-2026-61977JetSearch · Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium5.3EPSS 0.3%2026-07-13CVE Database V5CVE-2026-61977 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetSearch jet-search allows Retrieve Embedded Sensitive Data.This issue affects JetSearch: from n/a through <= 3.6.1.2. EPSS 0.3%Vulnerability Crocoblock #cwe-497	CVE Database V5	2026-07-13
Medium	5.3	EPSS 0.3%	CVE-2026-61976JetBlocks For Elementor · Exposure of Sensitive System Information to an Unauthorized Control Sphere in Crocoblock JetBlocks For… Medium5.3EPSS 0.3%2026-07-13CVE Database V5CVE-2026-61976 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Retrieve Embedded Sensitive Data.This issue affects JetBlocks For Elementor: from n/a through <= 1.5.0. EPSS 0.3%Vulnerability Crocoblock #cwe-497	CVE Database V5	2026-07-13
Medium	5.3	EPSS 0.3%	CVE-2026-61975JetReviews · Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium5.3EPSS 0.3%2026-07-13CVE Database V5CVE-2026-61975 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetReviews jet-reviews allows Retrieve Embedded Sensitive Data.This issue affects JetReviews: from n/a through <= 3.0.1. EPSS 0.3%Vulnerability Crocoblock #cwe-497	CVE Database V5	2026-07-13
Medium	6.5	EPSS 0.2%	CVE-2026-57354JetReviews · Cross-site Scripting Medium6.5EPSS 0.2%2026-07-02CVE Database V5CVE-2026-57354 Subscriber Cross Site Scripting (XSS) in JetReviews <= 3.0.0.1 versions. EPSS 0.2%Vulnerability Crocoblock. Jetimpex Inc.#cwe-79	CVE Database V5	2026-07-02
Critical	9.3	EPSS 0.4%	CVE-2026-56068JetEngine · SQL Injection Critical9.3EPSS 0.4%2026-06-26CVE Database V5CVE-2026-56068 Unauthenticated SQL Injection in JetEngine <= 3.8.10.2 versions. EPSS 0.4%Vulnerability Crocoblock. Jetimpex Inc.#cwe-89	CVE Database V5	2026-06-26
Critical	9.3	EPSS 0.5%	CVE-2026-56067JetSmartFilters · SQL Injection Critical9.3EPSS 0.5%2026-06-26CVE Database V5CVE-2026-56067 Unauthenticated SQL Injection in JetSmartFilters <= 3.8.3 versions. EPSS 0.5%Vulnerability Crocoblock. Jetimpex Inc.#cwe-89	CVE Database V5	2026-06-26
Critical	9.3	EPSS 0.4%	CVE-2026-54820JetBooking · SQL Injection Critical9.3EPSS 0.4%2026-06-26CVE Database V5CVE-2026-54820 Unauthenticated SQL Injection in JetBooking <= 4.0.4.1 versions. EPSS 0.4%Vulnerability Crocoblock. Jetimpex Inc.#cwe-89	CVE Database V5	2026-06-26
Critical	9.3	EPSS 0.4%	CVE-2026-49076JetEngine · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Crocoblock… Critical9.3EPSS 0.4%2026-06-17CVE Database V5CVE-2026-49076 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine jet-engine allows Blind SQL Injection.This issue affects JetEngine: from n/a through 3.8.9.1. EPSS 0.4%Vulnerability Crocoblock #cwe-89	CVE Database V5	2026-06-17

Showing 21–40 of 112 results