Crocoblock Jetwoobuilder vulnerabilities
5 vulnerabilities
Known vulnerabilities in Crocoblock Jetwoobuilder, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-31016crocoblock · jetwoobuilder +1 moreWordPress JetWooBuilder plugin <= 2.1.18 - Local File Inclusion vulnerabilityImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows PHP Local File Inclusion.This issue affects JetWooBuilder: from n/a through <= 2.1.18.EPSS0.60%HighCVE-2025-39449crocoblock · jetwoobuilder +1 moreWordPress JetWooBuilder plugin <= 2.1.18 - Broken Access Control VulnerabilityMissing Authorization vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetWooBuilder: from n/a through <= 2.1.18.EPSS0.36%MediumCVE-2025-53998crocoblock · jetwoobuilder +1 moreWordPress JetWooBuilder <= 2.1.20 - Sensitive Data Exposure VulnerabilityInsertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows Retrieve Embedded Sensitive Data.This issue affects JetWooBuilder: from n/a through <= 2.1.20.EPSS0.37%MediumCVE-2025-49927crocoblock · jetwoobuilder +1 moreWordPress JetWooBuilder plugin <= 2.1.20.1 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows Stored XSS.This issue affects JetWooBuilder: from n/a through <= 2.1.20.1.EPSS0.22%MediumCVE-2025-49928crocoblock · jetwoobuilder +1 moreWordPress JetWooBuilder plugin <= 2.1.20 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows DOM-Based XSS.This issue affects JetWooBuilder: from n/a through <= 2.1.20.EPSS0.22%