Crocoblock Jetblog vulnerabilities
6 vulnerabilities
Known vulnerabilities in Crocoblock Jetblog, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2025-68503crocoblock · jetblog +1 moreWordPress JetBlog plugin <= 2.4.7 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Crocoblock JetBlog jet-blog allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetBlog: from n/a through <= 2.4.7.EPSS0.31%HighCVE-2025-26958crocoblock · jetblog +1 moreWordPress JetBlog plugin <= 2.4.3 - Broken Access Control VulnerabilityMissing Authorization vulnerability in Crocoblock JetBlog jet-blog allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetBlog: from n/a through <= 2.4.3.EPSS0.37%MediumCVE-2025-26744crocoblock · jetblog +1 moreWordPress JetBlog plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog jet-blog allows DOM-Based XSS.This issue affects JetBlog: from n/a through <= 2.4.3.EPSS0.22%MediumCVE-2025-49932crocoblock · jetblog +1 moreWordPress JetBlog plugin <= 2.4.4.1 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog jet-blog allows Stored XSS.This issue affects JetBlog: from n/a through <= 2.4.4.1.EPSS0.22%MediumCVE-2025-49933crocoblock · jetblog +1 moreWordPress JetBlog plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog: from n/a through <= 2.4.4.EPSS0.22%HighCVE-2026-94661crocoblock · jetblog +1 moreWordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog: from n/a through 2.4.10.EPSS0.18%