Crocoblock vulnerabilities
118 vulnerabilities
Known vulnerabilities in Crocoblock products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 25 products.
Products
25- Jetengine23 vulnerabilities
- Jetelements For Elementor16 vulnerabilities
- Jetblocks For Elementor9 vulnerabilities
- Jetelements7 vulnerabilities
- Jetsearch7 vulnerabilities
- Jettabs7 vulnerabilities
- Jetwidgets For Elementor7 vulnerabilities
- Jetblog6 vulnerabilities
- Jetpopup6 vulnerabilities
- Jetformbuilder5 vulnerabilities
- Jetwoobuilder5 vulnerabilities
- Jetreviews4 vulnerabilities
- Jetsmartfilters4 vulnerabilities
- Jetmenu3 vulnerabilities
- Jettricks3 vulnerabilities
- Jetproductgallery2 vulnerabilities
- Jetappointment1 vulnerabilities
- Jetbooking1 vulnerabilities
- Jetcomparewishlist1 vulnerabilities
- Jetengine For Elementor1 vulnerabilities
- Jetformbuilder — Dynamic Blocks Form Builder1 vulnerabilities
- Jetgridbuilder1 vulnerabilities
- Jetproducttables1 vulnerabilities
- Jetthemecore1 vulnerabilities
- Jetwidgets For Elementor And Woocommerce1 vulnerabilities
CVE-2026-111414crocoblockjetelements for elementor
EPSS score0.13%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2.4.CVE-2026-110890crocoblockjetsmartfiltersEPSS score0.16%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Stored XSS.This issue affects JetSmartFilters: from n/a through 3.8.6.CVE-2026-107870crocoblockjetengineEPSS score0.25%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEngine: from n/a through 3.8.16.CVE-2026-107867crocoblockjetproducttablesEPSS score0.20%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetProductTables jet-product-tables allows Reflected XSS.This issue affects JetProductTables: from n/a through 1.2.4.CVE-2026-107431crocoblockjetformbuilderEPSS score0.33%
Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder: from n/a through 3.6.6.CVE-2026-107865crocoblockjetmenu+1EPSS score0.16%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetMenu jet-menu allows Stored XSS.This issue affects JetMenu: from n/a through 3.0.5.CVE-2026-107866crocoblockjetelements for elementor+1EPSS score0.16%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2.3.CVE-2021-41844crocoblockjetengineEPSS score1.09%
Crocoblock JetEngine before 2.9.1 does not properly validate and sanitize form data.CVE-2021-38607crocoblockjetengineEPSS score0.60%
Crocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input.CVE-2021-24268crocoblockjetwidgets_for_elementor+2EPSS score0.59%
The “JetWidgets For Elementor” WordPress Plugin before 1.0.9 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.CVE-2025-54009crocoblockjetsmartfilters+1EPSS score0.20%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Stored XSS.This issue affects JetSmartFilters: from n/a through <= 3.6.8.CVE-2025-54008crocoblockjetsmartfilters+1EPSS score0.34%
Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Retrieve Embedded Sensitive Data.This issue affects JetSmartFilters: from n/a through <= 3.6.7.CVE-2025-54749crocoblockjetproductgallery+1EPSS score0.17%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetProductGallery jet-woo-product-gallery allows Stored XSS.This issue affects JetProductGallery: from n/a through <= 2.2.0.2.CVE-2025-54687crocoblockjettabs+1EPSS score0.22%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetTabs jet-tabs allows DOM-Based XSS.This issue affects JetTabs: from n/a through <= 2.2.9.1.CVE-2025-54688crocoblockjetengine+1EPSS score0.22%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through <= 3.7.1.2.CVE-2025-55714crocoblockjetelements for elementor+1EPSS score0.17%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through <= 2.7.9.CVE-2025-68495crocoblockjetengine+1EPSS score0.21%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows Reflected XSS.This issue affects JetEngine: from n/a through <= 3.8.0.CVE-2025-68499crocoblockjettabs+1EPSS score0.16%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetTabs jet-tabs allows DOM-Based XSS.This issue affects JetTabs: from n/a through <= 2.2.12.CVE-2025-68502crocoblockjetpopup+1EPSS score0.27%
Authorization Bypass Through User-Controlled Key vulnerability in Crocoblock JetPopup jet-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetPopup: from n/a through <= 2.0.20.1.CVE-2025-68504crocoblockjetsearch+1EPSS score0.21%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSearch jet-search allows DOM-Based XSS.This issue affects JetSearch: from n/a through <= 3.5.16.