CrocoBlock vulnerabilities and threats

107 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.2%	CVE-2025-49927JetWooBuilder (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-10-22CVE Database V5CVE-2025-49927 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows Stored XSS.This issue affects JetWooBuilder: from n/a through <= 2.1.20.1. EPSS 0.2%Vulnerability Crocoblock	CVE Database V5	2025-10-22
High	7.5	EPSS 0.5%	CVE-2025-49921JetReviews (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High7.5EPSS 0.5%2025-10-22CVE Database V5CVE-2025-49921 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Crocoblock JetReviews jet-reviews allows PHP Local File Inclusion.This issue affects JetReviews: from n/a through <= 3.0.0. EPSS 0.5%Vulnerability Crocoblock	CVE Database V5	2025-10-22
High	8.5	EPSS 0.4%	CVE-2025-53194JetEngine (WordPress plugin) · Deserialization of Untrusted Data High8.5EPSS 0.4%2025-08-20CVE Database V5CVE-2025-53194 Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Code Injection.This issue affects JetEngine: from n/a through <= 3.7.0. EPSS 0.4%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.3%	CVE-2025-53195JetEngine (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2025-08-20CVE Database V5CVE-2025-53195 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through <= 3.7.0. EPSS 0.3%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.5%	CVE-2025-53196JetEngine (WordPress plugin) · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.5%2025-08-20CVE Database V5CVE-2025-53196 Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetEngine jet-engine allows Retrieve Embedded Sensitive Data.This issue affects JetEngine: from n/a through <= 3.7.0. EPSS 0.5%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.4%	CVE-2025-53983JetElements For Elementor (WordPress plugin) · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.4%2025-08-20CVE Database V5CVE-2025-53983 Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetElements For Elementor jet-elements allows Retrieve Embedded Sensitive Data.This issue affects JetElements For Elementor: from n/a through <= 2.7.7. EPSS 0.4%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.4%	CVE-2025-53985JetTabs (WordPress plugin) · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.4%2025-08-20CVE Database V5CVE-2025-53985 Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetTabs jet-tabs allows Retrieve Embedded Sensitive Data.This issue affects JetTabs: from n/a through <= 2.2.9. EPSS 0.4%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.4%	CVE-2025-53987JetMenu (WordPress plugin) · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.4%2025-08-20CVE Database V5CVE-2025-53987 Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetMenu jet-menu allows Retrieve Embedded Sensitive Data.This issue affects JetMenu: from n/a through <= 2.4.11.1. EPSS 0.4%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.3%	CVE-2025-53988JetBlocks For Elementor (WordPress plugin) · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.3%2025-08-20CVE Database V5CVE-2025-53988 Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Retrieve Embedded Sensitive Data.This issue affects JetBlocks For Elementor: from n/a through <= 1.3.18. EPSS 0.3%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.3%	CVE-2025-53992JetTricks (WordPress plugin) · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.3%2025-08-20CVE Database V5CVE-2025-53992 Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetTricks jet-tricks allows Retrieve Embedded Sensitive Data.This issue affects JetTricks: from n/a through <= 1.5.4.1. EPSS 0.3%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.4%	CVE-2025-53993JetPopup (WordPress plugin) · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.4%2025-08-20CVE Database V5CVE-2025-53993 Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetPopup jet-popup allows Retrieve Embedded Sensitive Data.This issue affects JetPopup: from n/a through <= 2.0.15. EPSS 0.4%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.4%	CVE-2025-53998JetWooBuilder (WordPress plugin) · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.4%2025-08-20CVE Database V5CVE-2025-53998 Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows Retrieve Embedded Sensitive Data.This issue affects JetWooBuilder: from n/a through <= 2.1.20. EPSS 0.4%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.3%	CVE-2025-54008JetSmartFilters (WordPress plugin) · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.3%2025-08-20CVE Database V5CVE-2025-54008 Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Retrieve Embedded Sensitive Data.This issue affects JetSmartFilters: from n/a through <= 3.6.7. EPSS 0.3%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.2%	CVE-2025-54749JetProductGallery (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-08-14CVE Database V5CVE-2025-54749 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetProductGallery jet-woo-product-gallery allows Stored XSS.This issue affects JetProductGallery: from n/a through <= 2.2.0.2. EPSS 0.2%Vulnerability Crocoblock	CVE Database V5	2025-08-14
Medium	6.5	EPSS 0.2%	CVE-2025-55714JetElements For Elementor (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-08-14CVE Database V5CVE-2025-55714 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through <= 2.7.9. EPSS 0.2%Vulnerability Crocoblock	CVE Database V5	2025-08-14
Medium	6.5	EPSS 0.2%	CVE-2025-54688JetEngine (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-08-14CVE Database V5CVE-2025-54688 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through <= 3.7.1.2. EPSS 0.2%Vulnerability Crocoblock	CVE Database V5	2025-08-14
Medium	6.5	EPSS 0.2%	CVE-2025-54687JetTabs (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-08-14CVE Database V5CVE-2025-54687 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetTabs jet-tabs allows DOM-Based XSS.This issue affects JetTabs: from n/a through <= 2.2.9.1. EPSS 0.2%Vulnerability Crocoblock	CVE Database V5	2025-08-14
Medium	6.5	EPSS 0.2%	CVE-2025-54009JetSmartFilters (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-07-16CVE Database V5CVE-2025-54009 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Stored XSS.This issue affects JetSmartFilters: from n/a through <= 3.6.8. EPSS 0.2%Vulnerability Crocoblock	CVE Database V5	2025-07-16
Medium	6.5	EPSS 0.2%	CVE-2025-53996JetSearch (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-07-16CVE Database V5CVE-2025-53996 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSearch jet-search allows Stored XSS.This issue affects JetSearch: from n/a through <= 3.5.10.1. EPSS 0.2%Vulnerability Crocoblock	CVE Database V5	2025-07-16
Medium	6.5	EPSS 0.2%	CVE-2025-53995JetPopup (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-07-16CVE Database V5CVE-2025-53995 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetPopup jet-popup allows Stored XSS.This issue affects JetPopup: from n/a through <= 2.0.15.1. EPSS 0.2%Vulnerability Crocoblock	CVE Database V5	2025-07-16

Page 4 of 6