CVE-2023-48759

CVE-2023-48759 is a Missing Authorization vulnerability in Crocoblock JetElements For Elementor (affected: Elementor JetElements <= 2.6.13). The issue allows unauthenticated users to download arbitrary attachments due to a missing authorization check on the download path (arbitrary attachment ...

CVE-2023-48760

The Crocoblock JetElements For Elementor WordPress plugin is affected by a Missing Authorization vulnerability in versions 2.6.13 and earlier . This flaw allows for unauthenticated broken access control , potentially enabling attackers to perform actions without proper authentication. Additionall...

CVE-2025-0371

CVE-2025-0371 concerns the WordPress JetElements plugin, with stored cross-site scripting in multiple widgets in all versions up to 2.7.2.1. The root cause is insufficient input sanitization and output escaping on user-supplied attributes, enabling an authenticated attacker (contributor level or ...

CVE-2023-48761

CVE-2023-48761 is a Broken Access Control (Missing Authorization) vulnerability involving Crocoblock Jira elements suite (JetElements and related plugins). The Initial CVE notes exposure in JetElements For Elementor up to version 2.6.13. Connected sources show Crocoblock plugins affected under CV...