Crocoblock JetElements For Elementor 安全漏洞

Crocoblock JetElements For Elementor is a design plugin from Crocoblock USA. A security vulnerability exists in Crocoblock JetElements For Elementor version 2.7.7 and prior versions, which stems from the insertion of sensitive information into the sent data, which could result in the retrieval of...

PT-2025-33993 · Crocoblock +1 · Jetblocks +1

Name of the Vulnerable Software and Affected Versions: Crocoblock JetBlocks for Elementor versions through 1.3.18 Description: A flaw exists in Crocoblock JetBlocks for Elementor that allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data...

CVE-2025-54749

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetProductGallery jet-woo-product-gallery allows Stored XSS.This issue affects JetProductGallery: from n/a through = 2.2.0.2...

CVE-2025-55714

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through = 2.7.9...

CVE-2025-54687

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetTabs jet-tabs allows DOM-Based XSS.This issue affects JetTabs: from n/a through = 2.2.9.1...

CVE-2025-54688

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through = 3.7.1.2...

CVE-2025-55714

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through = 2.7.9...

CVE-2025-54749

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetProductGallery jet-woo-product-gallery allows Stored XSS.This issue affects JetProductGallery: from n/a through = 2.2.0.2...

CVE-2025-54749

CVE-2025-54749 is a Stored XSS in Crocoblock JetProductGallery (WordPress plugin) affecting versions up to and including 2.2.0.2. The vulnerability stems from improper neutralization of input during web page generation, enabling attacker-controlled scripts to be stored and served to users. Affect...

CVE-2025-54749 WordPress JetProductGallery Plugin <= 2.2.0.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetProductGallery jet-woo-product-gallery allows Stored XSS.This issue affects JetProductGallery: from n/a through = 2.2.0.2...

CVE-2025-54749 WordPress JetProductGallery Plugin <= 2.2.0.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetProductGallery allows Stored XSS. This issue affects JetProductGallery: from n/a through 2.2.0.2...

CVE-2025-55714

CVE-2025-55714 is a stored XSS in Crocoblock JetElements for Elementor (JetElements) up to version 2.7.9. The issue arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. Affected product: JetElements for Elementor (WordPress plugin). Root c...

CVE-2025-54688

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through = 3.7.1.2...

CVE-2025-54687

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetTabs jet-tabs allows DOM-Based XSS.This issue affects JetTabs: from n/a through = 2.2.9.1...

CVE-2025-54687

CVE-2025-54687 affects WordPress Crocoblock JetTabs up to version 2.2.9.1. The issue is a DOM-based Cross-Site Scripting vulnerability caused by improper neutralization of input during web page generation. CVSS v3.1 base score is 6.5 (Medium); attack vector Network, privileges Low, user interacti...

PT-2025-33239 · WordPress · Crocoblock Jettabs

Name of the Vulnerable Software and Affected Versions: Crocoblock JetTabs versions through 2.2.9.1 Description: The software contains a DOM-Based Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Update Crocoblock JetTabs to a...

PT-2025-33395 · WordPress · Crocoblock Jetproductgallery

Name of the Vulnerable Software and Affected Versions: Crocoblock JetProductGallery versions through 2.2.0.2 Description: Improper neutralization of input during web page generation allows for Stored Cross-site Scripting XSS. This issue enables malicious actors to inject scripts into web pages...

PT-2025-33240 · WordPress · Crocoblock Jetengine

Name of the Vulnerable Software and Affected Versions: Crocoblock JetEngine versions through 3.7.1.2 Description: A Stored Cross-site Scripting XSS issue exists in Crocoblock JetEngine due to improper neutralization of input during web page generation. This allows an attacker to inject malicious...

PT-2025-33402 · Crocoblock +1 · Jetelements For Elementor +1

Name of the Vulnerable Software and Affected Versions: Crocoblock JetElements For Elementor versions through 2.7.9 Description: Improper neutralization of input during web page generation allows for Stored Cross-site Scripting XSS. Recommendations: Update Crocoblock JetElements For Elementor to a...

WordPress JetTabs Plugin plugin <= 2.2.9.1 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by stealthcopter in WordPress Plugin JetTabs versions = 2.2.9.1...