Lucene search
+L

27 matches found

NVD
NVD
added 2026/07/13 10:16 a.m.8 views

CVE-2026-61975

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetReviews jet-reviews allows Retrieve Embedded Sensitive Data.This issue affects JetReviews: from n/a through = 3.0.1...

5.3CVSS0.00197EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/13 8:41 a.m.18 views

CVE-2026-61975

CVE-2026-61975 affects the WordPress JetReviews plugin (Crocoblock) up to version 3.0.1. The issue is Exposure of Sensitive System Information to an Unauthorized Control Sphere, allowing retrieval of embedded sensitive data from JetReviews. The NVD entries describe the vulnerability but do not pr...

5.3CVSS6.1AI score0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/13 8:41 a.m.31 views

CVE-2026-61975 WordPress JetReviews plugin <= 3.0.1 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetReviews jet-reviews allows Retrieve Embedded Sensitive Data.This issue affects JetReviews: from n/a through = 3.0.1...

5.3CVSS0.00197EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/02 12:17 p.m.7 views

CVE-2026-57354

Subscriber Cross Site Scripting XSS in JetReviews = 3.0.0.1 versions...

6.5CVSS0.00218EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/02 11:15 a.m.21 views

CVE-2026-57354

The CVE-2026-57354 entry describes a Subscriber Cross Site Scripting (XSS) vulnerability in the WordPress JetReviews plugin limited to versions

6.5CVSS5.8AI score0.00218EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/02 11:15 a.m.8 views

CVE-2026-57354

Subscriber Cross Site Scripting XSS in JetReviews = 3.0.0.1 versions...

6.5CVSS5.8AI score0.00218EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/02 11:15 a.m.35 views

CVE-2026-57354 WordPress JetReviews plugin <= 3.0.0.1 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in JetReviews = 3.0.0.1 versions...

6.5CVSS0.00218EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/23 3:14 p.m.3 views

CVE-2025-49921

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Crocoblock JetReviews jet-reviews allows PHP Local File Inclusion.This issue affects JetReviews: from n/a through = 3.0.0...

7.5CVSS5.9AI score0.00458EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/22 3:31 p.m.4 views

EUVD-2025-35537

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in CrocoBlock JetReviews jet-reviews allows PHP Local File Inclusion.This issue affects JetReviews: from n/a through = 3.0.0...

6.6AI score0.00458EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/22 3:15 p.m.4 views

CVE-2025-49921

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Crocoblock JetReviews jet-reviews allows PHP Local File Inclusion.This issue affects JetReviews: from n/a through = 3.0.0...

7.5CVSS0.00458EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/22 2:32 p.m.11 views

CVE-2025-49921

CVE-2025-49921 describes an Local File Inclusion (LFI) in the WordPress JetReviews plugin ≤ 3.0.0 due to improper control of the filename in include/require statements, enabling potential local file exposure. The issue affects JetReviews versions up to 3.0.0. Remediation recommended: update JetRe...

7.5CVSS5.9AI score0.00458EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/22 2:32 p.m.14 views

CVE-2025-49921 WordPress JetReviews plugin <= 3.0.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Crocoblock JetReviews jet-reviews allows PHP Local File Inclusion.This issue affects JetReviews: from n/a through = 3.0.0...

7.5CVSS0.00458EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/22 2:32 p.m.4 views

CVE-2025-49921 WordPress JetReviews plugin <= 3.0.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Crocoblock JetReviews jet-reviews allows PHP Local File Inclusion.This issue affects JetReviews: from n/a through = 3.0.0...

7.5CVSS5.3AI score0.00458EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.5 views

WordPress plugin JetReviews jet-reviews 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A security...

7.5CVSS6.7AI score0.00458EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/22 12:0 a.m.5 views

PT-2025-43185

Name of the Vulnerable Software and Affected Versions CrocoBlock JetReviews versions through 3.0.0 Description A flaw exists in CrocoBlock JetReviews that allows for PHP Local File Inclusion due to improper control of filename for include/require statements. This issue is related to a PHP Remote...

7.3CVSS6.7AI score0.00458EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-15750

Malicious code in bioql PyPI...

7.5CVSS8.2AI score0.0051EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/08/05 8:0 a.m.5 views

WordPress JetReviews plugin <= 3.0.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by stealthcopter in WordPress Plugin JetReviews versions = 3.0.0...

7.3CVSS7AI score0.00458EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/21 5:19 p.m.7 views

CVE-2025-39396

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Crocoblock JetReviews jet-reviews allows PHP Local File Inclusion.This issue affects JetReviews: from n/a through = 2.3.6...

7.5CVSS7.2AI score0.0051EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/19 6:15 p.m.13 views

CVE-2025-39396

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Crocoblock JetReviews jet-reviews allows PHP Local File Inclusion.This issue affects JetReviews: from n/a through = 2.3.6...

7.5CVSS0.0051EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/19 5:15 p.m.29 views

CVE-2025-39396 WordPress JetReviews plugin <= 2.3.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Crocoblock JetReviews jet-reviews allows PHP Local File Inclusion.This issue affects JetReviews: from n/a through = 2.3.6...

7.5CVSS0.0051EPSS
SaveExploits0References1
Rows per page
Query Builder