CVE-2025-67923

CVE-2025-67923 Exploitation Report JetEngine = 3.7.7 — Unauthenticated Stored Cross-Site Scripting via CCT REST API Date: March 11, 2026 CVSS Score: 7.1 High CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L Affected Plugin: JetEngine = 3.7.7 Plugin Slug: jet-engine Fixed In: 3.7.8 CVE:...

CVE-2026-28134

CVE-2026-28134 Exploitation Report JetEngine = 3.7.2 — Authenticated Contributor+ Remote Code Execution via Twig SSTI Date: March 11, 2026 CVSS Score: 8.8 High CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Plugin: JetEngine = 3.7.2 Plugin Slug: jet-engine CVE: CVE-2026-28134...

adyanutils (>=0.4.2, <=0.8.6), batch-automation (0.0.3) +5 more potentially affected by CVE-2026-96749 via pymongo (3.6.0)

pymongo PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - adyanutils =0.4.2, =0.55.5, =0.62.0 - hanita 0.1.3 - jetengine 0.1.3 - scout-browser 4.1.0 - yy-spider 1.0.0 Source cves: CVE-2026-96749 Source...

adyanutils (>=0.4.2, <=0.8.6), batch-automation (0.0.3) +5 more potentially affected by CVE-2026-88029 via pymongo (3.6.0)

pymongo PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - adyanutils =0.4.2, =0.55.5, =0.62.0 - hanita 0.1.3 - jetengine 0.1.3 - scout-browser 4.1.0 - yy-spider 1.0.0 Source cves: CVE-2026-88029 Source...

CVE-2026-107870

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEngine: from n/a through 3.8.16...

CVE-2026-107870

The Crocoblock JetEngine WordPress plugin is vulnerable to a DOM-Based Cross-Site Scripting (XSS) vulnerability in versions 3.8.16 and below . The flaw is caused by improper neutralization of input during web page generation. While the specific component or file is not specified, the vulnerabilit...

EUVD-2026-101031

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEngine: from n/a through 3.8.16...

CVE-2026-107870 WordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEngine: from n/a through 3.8.16...

CVE-2026-107870: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEngine: from n/a through 3.8.16...

VulnCheck KEV: CVE-2026-54188

Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.10 versions...

WordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin JetEngine versions = 3.8.16...

adyanutils (>=0.4.2, <=0.8.6), batch-automation (0.0.3) +5 more potentially affected by CVE-2026-96749 via pymongo (3.6.0)

pymongo PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - adyanutils =0.4.2, =0.55.5, =0.62.0 - hanita 0.1.3 - jetengine 0.1.3 - scout-browser 4.1.0 - yy-spider 1.0.0 Source cves: CVE-2026-96749 Source...

adyanutils (>=0.4.2, <=0.8.6), batch-automation (0.0.3) +5 more potentially affected by CVE-2026-88029 via pymongo (3.6.0)

pymongo PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - adyanutils =0.4.2, =0.55.5, =0.62.0 - hanita 0.1.3 - jetengine 0.1.3 - scout-browser 4.1.0 - yy-spider 1.0.0 Source cves: CVE-2026-88029 Source...

CVE-2026-97265

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3...

CVE-2026-97265 WordPress JetEngine plugin <= 3.8.15.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3...

EUVD-2026-90216

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3...

CVE-2026-97265 WordPress JetEngine plugin <= 3.8.15.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3...

CVE-2026-97265

The Crocoblock. Jetimpex Inc. JetEngine WordPress plugin (versions up to and including 3.8.15.3 ) is vulnerable to Stored Cross-site Scripting (XSS) . This flaw stems from the improper neutralization of input during web page generation. Successful exploitation could allow an attacker to inject ma...

CVE-2026-97238

Subscriber Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

CVE-2026-97237

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEngine: from n/a through 3.8.14.3...