Threat database

112 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.2%	CVE-2025-49933JetBlog · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crocoblock… Medium6.5EPSS 0.2%2025-10-22CVE Database V5CVE-2025-49933 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog: from n/a through <= 2.4.4. EPSS 0.2%Vulnerability Crocoblock	CVE Database V5	2025-10-22
Medium	6.5	EPSS 0.2%	CVE-2025-49932JetBlog · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crocoblock… Medium6.5EPSS 0.2%2025-10-22CVE Database V5CVE-2025-49932 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog jet-blog allows Stored XSS.This issue affects JetBlog: from n/a through <= 2.4.4.1. EPSS 0.2%Vulnerability Crocoblock	CVE Database V5	2025-10-22
Critical	9.3	EPSS 0.4%	CVE-2025-49931JetSearch · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Crocoblock… Critical9.3EPSS 0.4%2025-10-22CVE Database V5CVE-2025-49931 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetSearch jet-search allows Blind SQL Injection.This issue affects JetSearch: from n/a through 3.5.10. EPSS 0.4%Vulnerability Crocoblock #cwe-89	CVE Database V5	2025-10-22
High	7.1	EPSS 0.3%	CVE-2025-49930JetSearch · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crocoblock… High7.1EPSS 0.3%2025-10-22CVE Database V5CVE-2025-49930 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSearch jet-search allows Reflected XSS.This issue affects JetSearch: from n/a through <= 3.5.10. EPSS 0.3%Vulnerability Crocoblock	CVE Database V5	2025-10-22
Medium	6.5	EPSS 0.2%	CVE-2025-49928JetWooBuilder · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crocoblock… Medium6.5EPSS 0.2%2025-10-22CVE Database V5CVE-2025-49928 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows DOM-Based XSS.This issue affects JetWooBuilder: from n/a through <= 2.1.20. EPSS 0.2%Vulnerability Crocoblock	CVE Database V5	2025-10-22
Medium	6.5	EPSS 0.2%	CVE-2025-49927JetWooBuilder · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crocoblock… Medium6.5EPSS 0.2%2025-10-22CVE Database V5CVE-2025-49927 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows Stored XSS.This issue affects JetWooBuilder: from n/a through <= 2.1.20.1. EPSS 0.2%Vulnerability Crocoblock	CVE Database V5	2025-10-22
High	7.5	EPSS 0.5%	CVE-2025-49921JetReviews · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High7.5EPSS 0.5%2025-10-22CVE Database V5CVE-2025-49921 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Crocoblock JetReviews jet-reviews allows PHP Local File Inclusion.This issue affects JetReviews: from n/a through <= 3.0.0. EPSS 0.5%Vulnerability Crocoblock	CVE Database V5	2025-10-22
High	8.5	EPSS 0.4%	CVE-2025-53194JetEngine · Deserialization of Untrusted Data High8.5EPSS 0.4%2025-08-20CVE Database V5CVE-2025-53194 Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Code Injection.This issue affects JetEngine: from n/a through <= 3.7.0. EPSS 0.4%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.3%	CVE-2025-53195JetEngine · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crocoblock… Medium6.5EPSS 0.3%2025-08-20CVE Database V5CVE-2025-53195 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through <= 3.7.0. EPSS 0.3%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.5%	CVE-2025-53196JetEngine · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.5%2025-08-20CVE Database V5CVE-2025-53196 Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetEngine jet-engine allows Retrieve Embedded Sensitive Data.This issue affects JetEngine: from n/a through <= 3.7.0. EPSS 0.5%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.4%	CVE-2025-53983JetElements For Elementor · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.4%2025-08-20CVE Database V5CVE-2025-53983 Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetElements For Elementor jet-elements allows Retrieve Embedded Sensitive Data.This issue affects JetElements For Elementor: from n/a through <= 2.7.7. EPSS 0.4%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.4%	CVE-2025-53985JetTabs · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.4%2025-08-20CVE Database V5CVE-2025-53985 Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetTabs jet-tabs allows Retrieve Embedded Sensitive Data.This issue affects JetTabs: from n/a through <= 2.2.9. EPSS 0.4%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.4%	CVE-2025-53987JetMenu · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.4%2025-08-20CVE Database V5CVE-2025-53987 Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetMenu jet-menu allows Retrieve Embedded Sensitive Data.This issue affects JetMenu: from n/a through <= 2.4.11.1. EPSS 0.4%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.3%	CVE-2025-53988JetBlocks For Elementor · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.3%2025-08-20CVE Database V5CVE-2025-53988 Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Retrieve Embedded Sensitive Data.This issue affects JetBlocks For Elementor: from n/a through <= 1.3.18. EPSS 0.3%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.3%	CVE-2025-53992JetTricks · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.3%2025-08-20CVE Database V5CVE-2025-53992 Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetTricks jet-tricks allows Retrieve Embedded Sensitive Data.This issue affects JetTricks: from n/a through <= 1.5.4.1. EPSS 0.3%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.4%	CVE-2025-53993JetPopup · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.4%2025-08-20CVE Database V5CVE-2025-53993 Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetPopup jet-popup allows Retrieve Embedded Sensitive Data.This issue affects JetPopup: from n/a through <= 2.0.15. EPSS 0.4%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.4%	CVE-2025-53998JetWooBuilder · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.4%2025-08-20CVE Database V5CVE-2025-53998 Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows Retrieve Embedded Sensitive Data.This issue affects JetWooBuilder: from n/a through <= 2.1.20. EPSS 0.4%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.3%	CVE-2025-54008JetSmartFilters · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.3%2025-08-20CVE Database V5CVE-2025-54008 Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Retrieve Embedded Sensitive Data.This issue affects JetSmartFilters: from n/a through <= 3.6.7. EPSS 0.3%Vulnerability Crocoblock	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.2%	CVE-2025-54749JetProductGallery · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crocoblock… Medium6.5EPSS 0.2%2025-08-14CVE Database V5CVE-2025-54749 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetProductGallery jet-woo-product-gallery allows Stored XSS.This issue affects JetProductGallery: from n/a through <= 2.2.0.2. EPSS 0.2%Vulnerability Crocoblock	CVE Database V5	2025-08-14
Medium	6.5	EPSS 0.2%	CVE-2025-55714JetElements For Elementor · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crocoblock… Medium6.5EPSS 0.2%2025-08-14CVE Database V5CVE-2025-55714 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through <= 2.7.9. EPSS 0.2%Vulnerability Crocoblock	CVE Database V5	2025-08-14

Showing 61–80 of 112 results