CVEs we hold for Crocoblock
Records whose assigning authority named Crocoblock as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-84817WordPress JetFormBuilder plugin <= 3.6.5.1 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetFormBuilder
CVE-2026-81760WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetEngine
CVE-2026-73365WordPress JetAppointment plugin <= 2.5.2 - SQL Injection vulnerabilityCrocoblock. Jetimpex Inc. JetAppointment
CVE-2026-66613WordPress JetEngine plugin <= 3.8.14 - Remote Code Execution (RCE) vulnerabilityCrocoblock. Jetimpex Inc. JetEngine
CVE-2026-66581WordPress JetEngine plugin <= 3.8.14.1 - Cross Site Scripting (XSS) vulnerabilityCrocoblock. Jetimpex Inc. JetEngine
CVE-2026-66579WordPress JetElements For Elementor plugin <= 2.9.2.1 - Cross Site Scripting (XSS) vulnerabilityCrocoblock. Jetimpex Inc. JetElements For Elementor
CVE-2026-66577WordPress JetSearch plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerabilityCrocoblock. Jetimpex Inc. JetSearch
CVE-2026-66576WordPress JetBlocks For Elementor plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerabilityCrocoblock. Jetimpex Inc. JetBlocks For Elementor
CVE-2026-66573WordPress JetTabs plugin <= 2.3.3.1 - Cross Site Scripting (XSS) vulnerabilityCrocoblock. Jetimpex Inc. JetTabs
CVE-2026-66572WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerabilityCrocoblock. Jetimpex Inc. JetBlog
CVE-2026-65468WordPress JetBooking plugin <= 4.1.2 - Broken Access Control vulnerabilityCrocoblock. Jetimpex Inc. JetBooking
CVE-2026-65467WordPress JetEngine plugin <= 3.8.11 - Server Side Request Forgery (SSRF) vulnerabilityCrocoblock. Jetimpex Inc. JetEngine
CVE-2026-65466WordPress JetBooking plugin <= 4.1.2 - Server Side Request Forgery (SSRF) vulnerabilityCrocoblock. Jetimpex Inc. JetBooking
CVE-2026-65465WordPress JetElements For Elementor plugin <= 2.9.1.1 - Cross Site Scripting (XSS) vulnerabilityCrocoblock. Jetimpex Inc. JetElements For Elementor
CVE-2026-61977WordPress JetSearch plugin <= 3.6.1.2 - Sensitive Data Exposure vulnerabilityCrocoblock JetSearch
CVE-2026-61976WordPress JetBlocks For Elementor plugin <= 1.5.0 - Sensitive Data Exposure vulnerabilityCrocoblock JetBlocks For Elementor
CVE-2026-61975WordPress JetReviews plugin <= 3.0.1 - Sensitive Data Exposure vulnerabilityCrocoblock JetReviews
CVE-2026-57354WordPress JetReviews plugin <= 3.0.0.1 - Cross Site Scripting (XSS) vulnerabilityCrocoblock. Jetimpex Inc. JetReviews
CVE-2026-56068WordPress JetEngine plugin <= 3.8.10.2 - SQL Injection vulnerabilityCrocoblock. Jetimpex Inc. JetEngine
CVE-2026-56067WordPress JetSmartFilters plugin <= 3.8.3 - SQL Injection vulnerabilityCrocoblock. Jetimpex Inc. JetSmartFilters
CVE-2026-54820WordPress JetBooking plugin <= 4.0.4.1 - SQL Injection vulnerabilityCrocoblock. Jetimpex Inc. JetBooking
CVE-2026-4662JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' ParameterCrocoblock JetEngine
CVE-2026-4352JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' ParameterCrocoblock JetEngine
CVE-2026-42774WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerabilityCrocoblock JetEngine
CVE-2026-3496JetBooking <= 4.0.3 - Unauthenticated SQL Injection via 'check_in_date' ParameterCrocoblock JetBooking
CVE-2026-32355WordPress JetEngine plugin < 3.8.4.1 - Deserialization of untrusted data vulnerabilityCrocoblock JetEngine
CVE-2026-28134WordPress JetEngine plugin <= 3.7.2 - Remote Code Execution (RCE) vulnerabilityCrocoblock JetEngine
CVE-2026-28082WordPress JetEngine plugin <= 3.8.13.1 - Cross Site Scripting (XSS) vulnerabilityCrocoblock. Jetimpex Inc. JetEngine
CVE-2026-27347WordPress JetPopup plugin <= 2.0.20.2 - Broken Access Control vulnerabilityCrocoblock JetPopup
CVE-2026-24958WordPress JetElements For Elementor plugin <= 2.7.12.2 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetElements For Elementor
CVE-2026-12360JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX EndpointCrocoblock JetEngine
CVE-2025-69333WordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerabilityCrocoblock JetEngine
CVE-2025-68504WordPress JetSearch plugin <= 3.5.16 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetSearch
CVE-2025-68503WordPress JetBlog plugin <= 2.4.7 - Broken Access Control vulnerabilityCrocoblock JetBlog
CVE-2025-68502WordPress JetPopup plugin <= 2.0.20.1 - Insecure Direct Object References (IDOR) vulnerabilityCrocoblock JetPopup
CVE-2025-68499WordPress JetTabs plugin <= 2.2.12 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetTabs
CVE-2025-68498WordPress JetTabs plugin <= 2.2.12 - Broken Access Control vulnerabilityCrocoblock JetTabs
CVE-2025-68495WordPress JetEngine plugin <= 3.8.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCrocoblock JetEngine
CVE-2025-67923WordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetEngine
CVE-2025-64355WordPress JetElements For Elementor plugin <= 2.7.12 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetElements For Elementor
CVE-2025-55714WordPress JetElements For Elementor Plugin <= 2.7.9 - Cross Site Scripting (XSS) VulnerabilityCrocoblock JetElements For Elementor
CVE-2025-54749WordPress JetProductGallery Plugin <= 2.2.0.2 - Cross Site Scripting (XSS) VulnerabilityCrocoblock JetProductGallery
CVE-2025-54688WordPress JetEngine Plugin plugin <= 3.7.1.2 - Cross Site Scripting (XSS) VulnerabilityCrocoblock JetEngine
CVE-2025-54687WordPress JetTabs Plugin plugin <= 2.2.9.1 - Cross Site Scripting (XSS) VulnerabilityCrocoblock JetTabs
CVE-2025-54009WordPress JetSmartFilters plugin <= 3.6.8 - Cross Site Scripting (XSS) VulnerabilityCrocoblock JetSmartFilters
CVE-2025-54008WordPress JetSmartFilters <= 3.6.7 - Sensitive Data Exposure VulnerabilityCrocoblock JetSmartFilters
CVE-2025-53998WordPress JetWooBuilder <= 2.1.20 - Sensitive Data Exposure VulnerabilityCrocoblock JetWooBuilder
CVE-2025-53996WordPress JetSearch plugin <= 3.5.10.1 - Cross Site Scripting (XSS) VulnerabilityCrocoblock JetSearch
CVE-2025-53995WordPress JetPopup plugin <= 2.0.15.1 - Cross Site Scripting (XSS) VulnerabilityCrocoblock JetPopup
CVE-2025-53994WordPress JetPopup plugin <= 2.0.15 - Cross Site Scripting (XSS) VulnerabilityCrocoblock JetPopup
CVE-2025-53993WordPress JetPopup plugin <= 2.0.15 - Sensitive Data Exposure vulnerabilityCrocoblock JetPopup
CVE-2025-53992WordPress JetTricks <= 1.5.4.1 - Sensitive Data Exposure VulnerabilityCrocoblock JetTricks
CVE-2025-53991WordPress JetTricks plugin <= 1.5.4.1 - Cross Site Scripting (XSS) VulnerabilityCrocoblock JetTricks
CVE-2025-53989WordPress JetBlocks For Elementor plugin <= 1.3.19 - Cross Site Scripting (XSS) VulnerabilityCrocoblock JetBlocks For Elementor
CVE-2025-53988WordPress JetBlocks For Elementor <= 1.3.18 - Sensitive Data Exposure VulnerabilityCrocoblock JetBlocks For Elementor
CVE-2025-53987WordPress JetMenu <= 2.4.11.1 - Sensitive Data Exposure VulnerabilityCrocoblock JetMenu
CVE-2025-53984WordPress JetTabs plugin <= 2.2.9 - Cross Site Scripting (XSS) VulnerabilityCrocoblock JetTabs
CVE-2025-53983WordPress JetElements For Elementor <= 2.7.7 - Sensitive Data Exposure VulnerabilityCrocoblock JetElements For Elementor
CVE-2025-53982WordPress JetElements For Elementor plugin <= 2.7.7 - Cross Site Scripting (XSS) VulnerabilityCrocoblock JetElements For Elementor
CVE-2025-53196WordPress JetEngine <= 3.7.0 - Sensitive Data Exposure VulnerabilityCrocoblock JetEngine
CVE-2025-53195WordPress JetEngine plugin <= 3.7.0 - Cross Site Scripting (XSS) VulnerabilityCrocoblock JetEngine
CVE-2025-53194WordPress JetEngine <= 3.7.0 - Remote Code Execution (RCE) VulnerabilityCrocoblock JetEngine
CVE-2025-49939WordPress JetElements For Elementor plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetElements For Elementor
CVE-2025-49938WordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetEngine
CVE-2025-49934WordPress JetBlocks For Elementor plugin <= 1.3.18 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetBlocks For Elementor
CVE-2025-49933WordPress JetBlog plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetBlog
CVE-2025-49932WordPress JetBlog plugin <= 2.4.4.1 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetBlog
CVE-2025-49931WordPress JetSearch plugin <= 3.5.10 - SQL Injection vulnerabilityCrocoblock JetSearch
CVE-2025-49930WordPress JetSearch plugin <= 3.5.10 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetSearch
CVE-2025-49928WordPress JetWooBuilder plugin <= 2.1.20 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetWooBuilder
CVE-2025-49927WordPress JetWooBuilder plugin <= 2.1.20.1 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetWooBuilder
CVE-2025-49921WordPress JetReviews plugin <= 3.0.0 - Local File Inclusion vulnerabilityCrocoblock JetReviews
CVE-2025-39451WordPress JetBlocks For Elementor plugin <= 1.3.16 - Broken Access Control VulnerabilityCrocoblock JetBlocks For Elementor
CVE-2025-39450WordPress JetTabs plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetTabs
CVE-2025-39449WordPress JetWooBuilder plugin <= 2.1.18 - Broken Access Control VulnerabilityCrocoblock JetWooBuilder
CVE-2025-39448WordPress JetElements For Elementor plugin <= 2.7.4.1 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetElements For Elementor
CVE-2025-39447WordPress JetElements For Elementor plugin <= 2.7.4.1 - Broken Access Control VulnerabilityCrocoblock JetElements For Elementor
CVE-2025-39396WordPress JetReviews plugin <= 2.3.6 - Local File Inclusion vulnerabilityCrocoblock JetReviews
CVE-2025-31412WordPress JetProductGallery plugin <= 2.1.22 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetProductGallery
CVE-2025-31043WordPress JetSearch plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetSearch
CVE-2025-31016WordPress JetWooBuilder plugin <= 2.1.18 - Local File Inclusion vulnerabilityCrocoblock JetWooBuilder
CVE-2025-30987WordPress JetBlocks For Elementor plugin <= 1.3.16 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetBlocks For Elementor
CVE-2025-30963WordPress JetSmartFilters plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetSmartFilters
CVE-2025-26958WordPress JetBlog plugin <= 2.4.3 - Broken Access Control VulnerabilityCrocoblock JetBlog
CVE-2025-26953WordPress JetMenu plugin <= 2.4.9 - Broken Access Control VulnerabilityCrocoblock JetMenu
CVE-2025-26944WordPress JetPopup plugin <= 2.0.11 - Broken Access Control VulnerabilityCrocoblock JetPopup
CVE-2025-26942WordPress JetTricks plugin <= 1.5.1 - Broken Access Control VulnerabilityCrocoblock JetTricks
CVE-2025-26870WordPress JetEngine plugin <= 3.6.4.1 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetEngine
CVE-2025-26744WordPress JetBlog plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetBlog
CVE-2025-22279WordPress JetCompareWishlist plugin <= 1.5.9 - Local File Inclusion vulnerabilityCrocoblock JetCompareWishlist
CVE-2025-0371Jet Elements <= 2.7.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple WidgetsCrocoblock JetElements
CVE-2025-0369Jet Engine <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via list_tag ParameterCrocoblock JetEngine
CVE-2024-7147JetBlocks <= 1.3.12 - Authenticated (Contributor+) Stored Cross-Site ScriptingCrocoblock JetBlocks for Elementor
CVE-2024-7146JetTabs <= 2.2.3 - Authenticated (Contributor+) Arbitrary Local File InclusionCrocoblock JetTabs
CVE-2024-7145JetElements <= 2.6.20 - Authenticated (Contributor+) Arbitrary Local File InclusionCrocoblock JetElements
CVE-2024-7144JetElements <= 2.6.20 - Authenticated (Contributor+) Stored Cross-Site ScriptingCrocoblock JetElements
CVE-2024-7136JetSearch <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingCrocoblock JetSearch
CVE-2024-43221WordPress JetGridBuilder plugin <= 1.1.2 - Local File Inclusion vulnerabilityCrocoblock JetGridBuilder
CVE-2024-38772WordPress JetWidgets for Elementor and WooCommerce plugin <= 1.1.7 - Contributor+ Limited Local File Inclusion…Crocoblock JetWidgets for Elementor and WooCommerce
CVE-2024-37497WordPress JetThemeCore plugin < 2.2.1 - Subscriber+ Arbitrary File Deletion vulnerabilityCrocoblock JetThemeCore
CVE-2023-48763WordPress JetFormBuilder plugin <= 3.1.4 - Content Injection vulnerabilityCrocoblock JetFormBuilder
CVE-2023-48762WordPress JetElements For Elementor Plugin <= 2.6.13 is vulnerable to Cross Site Request Forgery (CSRF)Crocoblock JetElements For Elementor
CVE-2023-48761WordPress JetElements For Elementor plugin <= 2.6.13 - Broken Access Control vulnerabilityCrocoblock JetElements For Elementor
CVE-2023-48760WordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Broken Access Control vulnerabilityCrocoblock JetElements For Elementor
CVE-2023-48759WordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Arbitrary Attachment Download vulnerabilityCrocoblock JetElements For Elementor
CVE-2023-48758WordPress JetEngine plugin <= 3.2.4 - Broken Access Control vulnerabilityCrocoblock JetEngine
CVE-2023-48757WordPress JetEngine plugin <= 3.2.4 - Privilege Escalation vulnerabilityCrocoblock JetEngine
CVE-2023-48756WordPress JetBlocks For Elementor Plugin <= 1.3.8 is vulnerable to Cross Site Scripting (XSS)Crocoblock JetBlocks For Elementor
CVE-2023-39157WordPress JetElements For Elementor Plugin <= 2.6.10 is vulnerable to Remote Code Execution (RCE)Crocoblock JetElements For Elementor
CVE-2023-37866WordPress JetFormBuilder plugin <= 3.0.8 - Authenticated Privilege Escalation vulnerabilityCrocoblock JetFormBuilder
CVE-2023-33212WordPress JetFormBuilder Plugin <= 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF)Crocoblock JetFormBuilder — Dynamic Blocks Form Builder
112 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.