CVE-2025-67923

Отчёт об эксплуатации CVE-2025-67923 JetEngine = 3.7.7 — Неаутентифицированная хранимая межсайтовая скриптинг-уязвимость XSS через CCT REST API Дата: 11 марта 2026 г. Оценка CVSS: 7.1 Высокая Вектор CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L Затронутый плагин: JetEngine = 3.7.7 Slug...

CVE-2026-28134

CVE-2026-28134 Exploitation Report JetEngine = 3.7.2 — удалённое выполнение кода через Twig SSTI для аутентифицированных пользователей Contributor+ Дата: 11 марта 2026 г. Оценка CVSS: 8.8 High Вектор CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Затронутый плагин: JetEngine = 3.7.2 Slug...

CVE-2026-97265

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3...

EUVD-2026-90216

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3...

CVE-2026-97265

The Crocoblock. Jetimpex Inc. JetEngine WordPress plugin (versions up to and including 3.8.15.3 ) is vulnerable to Stored Cross-site Scripting (XSS) . This flaw stems from the improper neutralization of input during web page generation. Successful exploitation could allow an attacker to inject ma...

CVE-2026-97265 WordPress JetEngine plugin <= 3.8.15.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3...

CVE-2026-97265 WordPress JetEngine plugin <= 3.8.15.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3...

CVE-2026-97238

Subscriber Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

CVE-2026-97237

Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

CVE-2026-97238 WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

EUVD-2026-89902

Subscriber Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

CVE-2026-97238

The WordPress JetEngine plugin (versions

CVE-2026-97238 WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

CVE-2026-97237 WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

EUVD-2026-89901

Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

CVE-2026-97237

The WordPress JetEngine plugin (versions

CVE-2026-97237 WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin JetEngine versions = 3.8.14.3...

WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin JetEngine versions = 3.8.14.3...

CVE-2026-81760

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine allows Reflected XSS. This issue affects JetEngine: from n/a through 3.8.14.2...