414 matches found
CVE-2021-38607
Crocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input...
CVE-2021-41844
Crocoblock JetEngine before 2.9.1 does not properly validate and sanitize form data...
CVE-2025-39449
Missing Authorization vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetWooBuilder: from n/a through = 2.1.18...
CVE-2025-39451
Missing Authorization vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetBlocks For Elementor: from n/a through = 1.3.16...
CVE-2025-39447
Missing Authorization vulnerability in Crocoblock JetElements For Elementor jet-elements allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetElements For Elementor: from n/a through = 2.7.4.1...
CVE-2025-39448
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through = 2.7.4.1...
CVE-2025-39450
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetTabs jet-tabs allows DOM-Based XSS.This issue affects JetTabs: from n/a through = 2.2.7...
CVE-2025-39396
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Crocoblock JetReviews jet-reviews allows PHP Local File Inclusion.This issue affects JetReviews: from n/a through = 2.3.6...
CVE-2025-39451
Missing Authorization vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetBlocks For Elementor: from n/a through = 1.3.16...
CVE-2025-39449
Missing Authorization vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetWooBuilder: from n/a through = 2.1.18...
CVE-2025-39447
Missing Authorization vulnerability in Crocoblock JetElements For Elementor jet-elements allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetElements For Elementor: from n/a through = 2.7.4.1...
CVE-2025-39447
CVE-2025-39447 is a missing-authorization (ACL) vulnerability in WordPress JetElements For Elementor up to version 2.7.4.1. Exploitation could grant access to functions not properly constrained by ACLs. A fix exists in 2.7.4.1; upgrade to that version or later to remediate. If upgrading is not po...
CVE-2025-39449
CVE-2025-39449 is a Missing Authorization vulnerability in WordPress JetWooBuilder (Elementor) affecting versions up to 2.1.18. The issue allows accessing functionality not properly constrained by ACLs, enabling a user with no privileges to access restricted functionality (attack surface defined ...
CVE-2025-39451 WordPress JetBlocks For Elementor plugin <= 1.3.16 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetBlocks For Elementor: from n/a through = 1.3.16...
CVE-2025-39451 WordPress JetBlocks For Elementor plugin <= 1.3.16 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetBlocks For Elementor: from n/a through = 1.3.16...
CVE-2025-39451
CVE-2025-39451 affects WordPress JetBlocks for Elementor (Crocoblock JetBlocks for Elementor) up to version 1.3.16, with a Missing Authorization vulnerability allowing access to functionality outside ACLs. CVSSv3.1 shows NETWORK attack vector, LOW attack complexity, NO privileges required, but HI...
CVE-2025-39396
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Crocoblock JetReviews jet-reviews allows PHP Local File Inclusion.This issue affects JetReviews: from n/a through = 2.3.6...
CVE-2025-39450
CVE-2025-39450 is a DOM-based XSS vulnerability in Crocoblock JetTabs (WordPress plugin) affecting JetTabs versions 2.2.7 and earlier. The issue stems from improper input neutralization during web page generation, enabling client-side script execution via crafted input. Connected sources (PT-2025...
CVE-2025-39396 WordPress JetReviews plugin <= 2.3.6 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Crocoblock JetReviews allows PHP Local File Inclusion.This issue affects JetReviews: from n/a through 2.3.6...
CVE-2025-39396
CVE-2025-39396 affects WordPress JetReviews for Elementor (JetReviews plugin)