Threat database

20 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.1%	CVE-2026-97265JetEngine · Cross-site Scripting Medium6.5EPSS 0.1%2026-09-30CVE Database V5CVE-2026-97265 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3. EPSS 0.1%Vulnerability Crocoblock. Jetimpex Inc.#cwe-79	CVE Database V5	2026-09-30
Medium	5.5	EPSS 0.2%	CVE-2026-97238JetEngine · Cross-site Scripting Medium5.5EPSS 0.2%2026-09-30CVE Database V5CVE-2026-97238 Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions. EPSS 0.2%Vulnerability Crocoblock. Jetimpex Inc.#cwe-79	CVE Database V5	2026-09-30
Medium	6.5	EPSS 0.2%	CVE-2026-93618JetTricks · Cross-site Scripting Medium6.5EPSS 0.2%2026-09-23CVE Database V5CVE-2026-93618 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimpex Inc. JetTricks allows Stored XSS. This issue affects JetTricks: from n/a through 2.0.1. EPSS 0.2%Vulnerability Crocoblock. Jetimpex Inc.#cwe-79	CVE Database V5	2026-09-23
Medium	6.5	EPSS 0.2%	CVE-2026-66579JetElements For Elementor · Cross-site Scripting Medium6.5EPSS 0.2%2026-09-17CVE Database V5CVE-2026-66579 Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.2.1 versions. EPSS 0.2%Vulnerability Crocoblock. Jetimpex Inc.#cwe-79	CVE Database V5	2026-09-17
Medium	6.5	EPSS 0.2%	CVE-2026-66577JetSearch · Cross-site Scripting Medium6.5EPSS 0.2%2026-09-17CVE Database V5CVE-2026-66577 Contributor Cross Site Scripting (XSS) in JetSearch <= 3.6.3 versions. EPSS 0.2%Vulnerability Crocoblock. Jetimpex Inc.#cwe-79	CVE Database V5	2026-09-17
Medium	6.5	EPSS 0.2%	CVE-2026-66576JetBlocks For Elementor · Cross-site Scripting Medium6.5EPSS 0.2%2026-09-17CVE Database V5CVE-2026-66576 Contributor Cross Site Scripting (XSS) in JetBlocks For Elementor <= 1.5.2 versions. EPSS 0.2%Vulnerability Crocoblock. Jetimpex Inc.#cwe-79	CVE Database V5	2026-09-17
Medium	6.5	EPSS 0.2%	CVE-2026-66573JetTabs · Cross-site Scripting Medium6.5EPSS 0.2%2026-09-17CVE Database V5CVE-2026-66573 Contributor Cross Site Scripting (XSS) in JetTabs <= 2.3.3.1 versions. EPSS 0.2%Vulnerability Crocoblock. Jetimpex Inc.#cwe-79	CVE Database V5	2026-09-17
Medium	6.5	EPSS 0.2%	CVE-2026-66572JetBlog · Cross-site Scripting Medium6.5EPSS 0.2%2026-09-17CVE Database V5CVE-2026-66572 Contributor Cross Site Scripting (XSS) in JetBlog <= 2.4.10 versions. EPSS 0.2%Vulnerability Crocoblock. Jetimpex Inc.#cwe-79	CVE Database V5	2026-09-17
High	7.1	EPSS 0.3%	CVE-2026-66581JetEngine · Cross-site Scripting High7.1EPSS 0.3%2026-08-20CVE Database V5CVE-2026-66581 CVE-2026-66581 is a high severity unauthenticated cross-site scripting (XSS) vulnerability in JetEngine by Crocoblock. Jetimpex Inc., affecting versions up to and including 3.8.14.1. This vulnerability allows an attacker to inject malicious scripts during web page generation due to improper input neutralization. EPSS 0.3%Vulnerability Crocoblock. Jetimpex Inc.#cwe-79	CVE Database V5	2026-08-20
Critical	9.8	EPSS 0.9%	CVE-2026-66613JetEngine · Improper Neutralization of Special Elements Used in a Template Engine Critical9.8EPSS 0.9%2026-08-19CVE Database V5CVE-2026-66613 CVE-2026-66613 is a critical vulnerability in JetEngine by Crocoblock. Jetimpex Inc. It allows unauthenticated remote code execution (RCE) in versions up to and including 3.8.14 due to improper neutralization of special elements in the template engine. EPSS 0.9%Vulnerability Crocoblock. Jetimpex Inc.#cwe-1336 #ghsa-wrpq-j7q3-24j7	CVE Database V5	2026-08-19
Critical	9.3	EPSS 0.4%	CVE-2026-73365JetAppointment · SQL Injection Critical9.3EPSS 0.4%2026-08-18CVE Database V5CVE-2026-73365 Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions. EPSS 0.4%Vulnerability Crocoblock. Jetimpex Inc.#cwe-89	CVE Database V5	2026-08-18
High	7.1	EPSS 0.3%	CVE-2026-28082JetEngine · Cross-site Scripting High7.1EPSS 0.3%2026-08-06CVE Database V5CVE-2026-28082 CVE-2026-28082 is a high-severity unauthenticated cross-site scripting (XSS) vulnerability in JetEngine by Crocoblock. Jetimpex Inc. It affects versions up to and including 3.8.13.1. The vulnerability allows improper neutralization of input during web page generation, potentially leading to reflected XSS attacks. There is no official patch or vendor advisory confirming remediation at this time. EPSS 0.3%Vulnerability Crocoblock. Jetimpex Inc.#cwe-79 #ghsa-4wv6-hfwf-hgxc	CVE Database V5	2026-08-06
Medium	5.3	EPSS 0.3%	CVE-2026-65468JetBooking · Missing Authorization Medium5.3EPSS 0.3%2026-07-23CVE Database V5CVE-2026-65468 Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions. EPSS 0.3%Vulnerability Crocoblock. Jetimpex Inc.#cwe-862	CVE Database V5	2026-07-23
Medium	4.9	EPSS 0.2%	CVE-2026-65467JetEngine · Server-Side Request Forgery (SSRF) Medium4.9EPSS 0.2%2026-07-23CVE Database V5CVE-2026-65467 Contributor Server Side Request Forgery (SSRF) in JetEngine <= 3.8.11 versions. EPSS 0.2%Vulnerability Crocoblock. Jetimpex Inc.#cwe-918	CVE Database V5	2026-07-23
Medium	4.9	EPSS 0.2%	CVE-2026-65466JetBooking · Server-Side Request Forgery (SSRF) Medium4.9EPSS 0.2%2026-07-23CVE Database V5CVE-2026-65466 Custom role Server Side Request Forgery (SSRF) in JetBooking <= 4.1.2 versions. EPSS 0.2%Vulnerability Crocoblock. Jetimpex Inc.#cwe-918	CVE Database V5	2026-07-23
Medium	6.5	EPSS 0.2%	CVE-2026-65465JetElements For Elementor · Cross-site Scripting Medium6.5EPSS 0.2%2026-07-23CVE Database V5CVE-2026-65465 Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.1.1 versions. EPSS 0.2%Vulnerability Crocoblock. Jetimpex Inc.#cwe-79	CVE Database V5	2026-07-23
Medium	6.5	EPSS 0.2%	CVE-2026-57354JetReviews · Cross-site Scripting Medium6.5EPSS 0.2%2026-07-02CVE Database V5CVE-2026-57354 Subscriber Cross Site Scripting (XSS) in JetReviews <= 3.0.0.1 versions. EPSS 0.2%Vulnerability Crocoblock. Jetimpex Inc.#cwe-79	CVE Database V5	2026-07-02
Critical	9.3	EPSS 0.4%	CVE-2026-56068JetEngine · SQL Injection Critical9.3EPSS 0.4%2026-06-26CVE Database V5CVE-2026-56068 Unauthenticated SQL Injection in JetEngine <= 3.8.10.2 versions. EPSS 0.4%Vulnerability Crocoblock. Jetimpex Inc.#cwe-89	CVE Database V5	2026-06-26
Critical	9.3	EPSS 0.5%	CVE-2026-56067JetSmartFilters · SQL Injection Critical9.3EPSS 0.5%2026-06-26CVE Database V5CVE-2026-56067 Unauthenticated SQL Injection in JetSmartFilters <= 3.8.3 versions. EPSS 0.5%Vulnerability Crocoblock. Jetimpex Inc.#cwe-89	CVE Database V5	2026-06-26
Critical	9.3	EPSS 0.4%	CVE-2026-54820JetBooking · SQL Injection Critical9.3EPSS 0.4%2026-06-26CVE Database V5CVE-2026-54820 Unauthenticated SQL Injection in JetBooking <= 4.0.4.1 versions. EPSS 0.4%Vulnerability Crocoblock. Jetimpex Inc.#cwe-89	CVE Database V5	2026-06-26

Showing 1–20 of 20 results