PT-2025-33994 · WordPress · Jettricks

Name of the Vulnerable Software and Affected Versions: Crocoblock JetTricks versions through 1.5.4.1 Description: An issue exists in Crocoblock JetTricks that allows retrieval of embedded sensitive data due to insertion of sensitive information into sent data. Recommendations: Update Crocoblock...

PT-2025-33966 · Crocoblock · Crocoblock Jetengine

Name of the Vulnerable Software and Affected Versions: Crocoblock JetEngine versions through 3.7.0 Description: Improper neutralization of input during web page generation allows for stored cross-site scripting XSS. Recommendations: Update Crocoblock JetEngine to a version later than 3.7.0...

PT-2025-33991 · Crocoblock · Jettabs

Name of the Vulnerable Software and Affected Versions: Crocoblock JetTabs versions through 2.2.9 Description: An insertion of sensitive information into sent data issue exists in Crocoblock JetTabs, potentially allowing the retrieval of embedded sensitive data. Recommendations: Update JetTabs to ...

PT-2025-33993 · Crocoblock +1 · Jetblocks +1

Name of the Vulnerable Software and Affected Versions: Crocoblock JetBlocks for Elementor versions through 1.3.18 Description: A flaw exists in Crocoblock JetBlocks for Elementor that allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data...

PT-2025-33990 · WordPress · Crocoblock Jetelements For Elementor

Name of the Vulnerable Software and Affected Versions: Crocoblock JetElements For Elementor versions n/a through 2.7.7 Description: A flaw exists in Crocoblock JetElements For Elementor that allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent...

PT-2025-33965 · WordPress · Crocoblock Jetengine

Name of the Vulnerable Software and Affected Versions: Crocoblock JetEngine versions through 3.7.0 Description: Improper neutralization of special elements used in a template engine in Crocoblock JetEngine allows code injection. Recommendations: Update Crocoblock JetEngine to a version later than...

PT-2025-33996 · Crocoblock · Jetwoobuilder

Name of the Vulnerable Software and Affected Versions: Crocoblock JetWooBuilder versions through 2.1.20 Description: An insertion of sensitive information into sent data issue exists in Crocoblock JetWooBuilder, allowing retrieval of embedded sensitive data. Recommendations: Update JetWooBuilder ...

Crocoblock JetElements For Elementor 安全漏洞

Crocoblock JetElements For Elementor is a design plugin from Crocoblock USA. A security vulnerability exists in Crocoblock JetElements For Elementor version 2.7.7 and prior versions, which stems from the insertion of sensitive information into the sent data, which could result in the retrieval of...

PT-2025-33998 · Crocoblock · Jetsmartfilters

Name of the Vulnerable Software and Affected Versions: Crocoblock JetSmartFilters versions through 3.6.7 Description: An insertion of sensitive information into sent data issue exists in Crocoblock JetSmartFilters, allowing retrieval of embedded sensitive data. Recommendations: Update...

PT-2025-33995 · WordPress · Crocoblock Jetpopup

Name of the Vulnerable Software and Affected Versions: Crocoblock JetPopup versions through 2.0.15 Description: The software contains a flaw that allows retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendations: Update Crocoblock JetPopup t...

CVE-2025-54749

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetProductGallery jet-woo-product-gallery allows Stored XSS.This issue affects JetProductGallery: from n/a through = 2.2.0.2...

CVE-2025-55714

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through = 2.7.9...

CVE-2025-54687

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetTabs jet-tabs allows DOM-Based XSS.This issue affects JetTabs: from n/a through = 2.2.9.1...

CVE-2025-54688

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through = 3.7.1.2...

CVE-2025-55714

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through = 2.7.9...

CVE-2025-54749

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetProductGallery jet-woo-product-gallery allows Stored XSS.This issue affects JetProductGallery: from n/a through = 2.2.0.2...

CVE-2025-54749

CVE-2025-54749 is a Stored XSS in Crocoblock JetProductGallery (WordPress plugin) affecting versions up to and including 2.2.0.2. The vulnerability stems from improper neutralization of input during web page generation, enabling attacker-controlled scripts to be stored and served to users. Affect...

CVE-2025-54749 WordPress JetProductGallery Plugin <= 2.2.0.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetProductGallery allows Stored XSS. This issue affects JetProductGallery: from n/a through 2.2.0.2...

CVE-2025-54749 WordPress JetProductGallery Plugin <= 2.2.0.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetProductGallery jet-woo-product-gallery allows Stored XSS.This issue affects JetProductGallery: from n/a through = 2.2.0.2...

CVE-2025-55714

CVE-2025-55714 is a stored XSS in Crocoblock JetElements for Elementor (JetElements) up to version 2.7.9. The issue arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. Affected product: JetElements for Elementor (WordPress plugin). Root c...