27 matches found
CVE-2026-107865
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetMenu jet-menu allows Stored XSS.This issue affects JetMenu: from n/a through 3.0.5...
CVE-2026-107865
The Crocoblock JetMenu plugin (versions through 3.0.5 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw due to the Improper Neutralization of Input During Web Page Generation . This vulnerability allows an attacker to store and execute malicious scripts in the context of the application...
CVE-2026-107865 WordPress JetMenu plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetMenu jet-menu allows Stored XSS.This issue affects JetMenu: from n/a through 3.0.5...
EUVD-2026-97304
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetMenu jet-menu allows Stored XSS.This issue affects JetMenu: from n/a through 3.0.5...
EUVD-2025-25318
Malicious code in bioql PyPI...
EUVD-2025-11112
Malicious code in bioql PyPI...
CVE-2025-53987
Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetMenu jet-menu allows Retrieve Embedded Sensitive Data.This issue affects JetMenu: from n/a through = 2.4.11.1...
CVE-2025-53987
Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetMenu jet-menu allows Retrieve Embedded Sensitive Data.This issue affects JetMenu: from n/a through = 2.4.11.1...
CVE-2025-53987 WordPress JetMenu <= 2.4.11.1 - Sensitive Data Exposure Vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetMenu jet-menu allows Retrieve Embedded Sensitive Data.This issue affects JetMenu: from n/a through = 2.4.11.1...
CVE-2025-53987 WordPress JetMenu <= 2.4.11.1 - Sensitive Data Exposure Vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetMenu jet-menu allows Retrieve Embedded Sensitive Data.This issue affects JetMenu: from n/a through = 2.4.11.1...
CVE-2025-53987
CVE-2025-53987 is a WordPress JetMenu vulnerability affecting Crocoblock JetMenu versions up to and including 2.4.11.1, described as an insertion of sensitive information into sent data that can lead to retrieval of embedded sensitive data. According to the public details, the CVSSv3.1 base score...
WordPress plugin JetMenu 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2025-33992 · Crocoblock · Jetmenu
Name of the Vulnerable Software and Affected Versions: Crocoblock JetMenu versions n/a through 2.4.11.1 Description: A flaw exists in Crocoblock JetMenu that allows the retrieval of embedded sensitive data through the insertion of sensitive information into sent data. Recommendations: Update...
CVE-2025-53987: Insertion of Sensitive Information Into Sent Data
Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetMenu jet-menu allows Retrieve Embedded Sensitive Data.This issue affects JetMenu: from n/a through = 2.4.11.1...
WordPress JetMenu <= 2.4.11.1 - Sensitive Data Exposure Vulnerability
Sensitive Data Exposure Vulnerability discovered by stealthcopter in WordPress Plugin JetMenu versions = 2.4.11.1...
CVE-2025-26953
Missing Authorization vulnerability in Crocoblock JetMenu jet-menu allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetMenu: from n/a through = 2.4.9...
CVE-2025-26953
Missing Authorization vulnerability in Crocoblock JetMenu jet-menu allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetMenu: from n/a through = 2.4.9...
CVE-2025-26953 WordPress JetMenu plugin <= 2.4.9 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Crocoblock JetMenu jet-menu allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetMenu: from n/a through = 2.4.9...
CVE-2025-26953
CVE-2025-26953 is a Missing Authorization vulnerability in Crocoblock JetMenu (JetMenu for Elementor) affecting versions up to and including 2.4.9. The issue allows accessing functionality not constrained by ACLs, with CVSS v3.1 base score 7.5 (Network, Low attack complexity, No privileges requir...
CVE-2025-26953 WordPress JetMenu plugin <= 2.4.9 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Crocoblock JetMenu jet-menu allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetMenu: from n/a through = 2.4.9...