372 matches found
CVE-2026-28082
CVE-2026-28082 affects the WordPress JetEngine plugin up to version 3.8.13.1, describing an unauthenticated Cross Site Scripting (XSS) vulnerability. The connected sources confirm the vulnerability existence and affected product/version but do not provide concrete technical details such as the ex...
CVE-2026-28082 WordPress JetEngine plugin <= 3.8.13.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.13.1 versions...
CVE-2026-28082: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.13.1 versions...
WordPress JetEngine plugin <= 3.8.13.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin JetEngine versions = 3.8.13.1...
CVE-2026-14864
The JetEngine WordPress plugin before 3.8.12 does not escape a post meta value before outputting it through one of its shortcodes, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the context of higher-privileged users such as...
WordPress JetEngine plugin < 3.8.12 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by axbqd in WordPress Plugin JetEngine versions 3.8.12...
CVE-2026-14864 JetEngine < 3.8.12 - Contributor+ Stored XSS via jet_engine Shortcode
The JetEngine WordPress plugin before 3.8.12 does not escape a post meta value before outputting it through one of its shortcodes, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the context of higher-privileged users such as...
CVE-2026-14864
The JetEngine WordPress plugin before 3.8.12 does not escape a post meta value before outputting it through one of its shortcodes, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the context of higher-privileged users such as...
CVE-2026-14864 JetEngine < 3.8.12 - Contributor+ Stored XSS via jet_engine Shortcode
The JetEngine WordPress plugin before 3.8.12 does not escape a post meta value before outputting it through one of its shortcodes, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the context of higher-privileged users such as...
EUVD-2026-51929
The JetEngine WordPress plugin before 3.8.12 does not escape a post meta value before outputting it through one of its shortcodes, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the context of higher-privileged users such as...
CVE-2026-14864
The JetEngine WordPress plugin before version 3.8.12 is vulnerable to Stored Cross-Site Scripting (XSS) due to a failure to escape a post meta value before outputting it through one of its shortcodes . This flaw allows users with Contributor roles or higher to inject malicious scripts that execut...
CVE-2026-14864: Improper Neutralization of Input During Web Page Generation
The JetEngine WordPress plugin before 3.8.12 does not escape a post meta value before outputting it through one of its shortcodes, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the context of higher-privileged users such as...
PT-2026-67054
The JetEngine WordPress plugin before 3.8.12 does not escape a post meta value before outputting it through one of its shortcodes, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the context of higher-privileged users such as...
CVE-2026-65467
Contributor Server Side Request Forgery SSRF in JetEngine = 3.8.11 versions...
EUVD-2026-48079
Contributor Server Side Request Forgery SSRF in JetEngine = 3.8.11 versions...
CVE-2026-65467 WordPress JetEngine plugin <= 3.8.11 - Server Side Request Forgery (SSRF) vulnerability
Contributor Server Side Request Forgery SSRF in JetEngine = 3.8.11 versions...
CVE-2026-65467 WordPress JetEngine plugin <= 3.8.11 - Server Side Request Forgery (SSRF) vulnerability
Contributor Server Side Request Forgery SSRF in JetEngine = 3.8.11 versions...
CVE-2026-65467
CVE-2026-65467 corresponds to a Server Side Request Forgery (SSRF) vulnerability in the WordPress JetEngine plugin, affecting versions up to 3.8.11. The issue is described as SSRF in JetEngine