CVE-2025-67923

CVE-2025-67923 漏洞利用报告 JetEngine = 3.7.7 — 通过 CCT REST API 的未认证存储型跨站脚本（XSS） 日期： 2026年3月11日 CVSS 评分： 7.1（高危） CVSS 向量： CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L 受影响插件： JetEngine = 3.7.7 插件标识（slug）： jet-engine 修复版本： 3.7.8 CVE： CVE-2025-67923 CWE： CWE-79 研究人员： Bonds（通过 Patchstack） 报告时间： 2025年10月19日...

CVE-2026-28134

CVE-2026-28134 漏洞利用报告 JetEngine = 3.7.2 — 通过 Twig SSTI 实现已认证（Contributor+）远程代码执行 日期： 2026 年 3 月 11 日 CVSS 评分： 8.8（高危） CVSS 向量： CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 受影响插件： JetEngine = 3.7.2 插件 Slug： jet-engine CVE： CVE-2026-28134 状态： 私有 测试的 WordPress 版本： 最新版 执行摘要 CVE-2026-28134 是 JetEngine...

CVE-2026-97265

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3...

EUVD-2026-90216

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3...

CVE-2026-97265

The Crocoblock. Jetimpex Inc. JetEngine WordPress plugin (versions up to and including 3.8.15.3 ) is vulnerable to Stored Cross-site Scripting (XSS) . This flaw stems from the improper neutralization of input during web page generation. Successful exploitation could allow an attacker to inject ma...

CVE-2026-97265 WordPress JetEngine plugin <= 3.8.15.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3...

CVE-2026-97265 WordPress JetEngine plugin <= 3.8.15.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3...

CVE-2026-97237

Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

CVE-2026-97238

Subscriber Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

CVE-2026-97238 WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

EUVD-2026-89902

Subscriber Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

CVE-2026-97238

The WordPress JetEngine plugin (versions

CVE-2026-97238 WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

CVE-2026-97237 WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

EUVD-2026-89901

Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

CVE-2026-97237

The WordPress JetEngine plugin (versions

CVE-2026-97237 WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin JetEngine versions = 3.8.14.3...

WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin JetEngine versions = 3.8.14.3...

CVE-2026-81760

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine allows Reflected XSS. This issue affects JetEngine: from n/a through 3.8.14.2...