Crocoblock Jetwoobuilder vulnerabilities

5 vulnerabilities

Known vulnerabilities in Crocoblock Jetwoobuilder, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2025-31016crocoblockjetwoobuilder+1
EPSS score
0.60%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows PHP Local File Inclusion.This issue affects JetWooBuilder: from n/a through <= 2.1.18.7.5CVE-2025-39449crocoblockjetwoobuilder+1
EPSS score
0.36%
Missing Authorization vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetWooBuilder: from n/a through <= 2.1.18.6.5CVE-2025-53998crocoblockjetwoobuilder+1
EPSS score
0.37%
Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows Retrieve Embedded Sensitive Data.This issue affects JetWooBuilder: from n/a through <= 2.1.20.6.5CVE-2025-49927crocoblockjetwoobuilder+1
EPSS score
0.22%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows Stored XSS.This issue affects JetWooBuilder: from n/a through <= 2.1.20.1.6.5CVE-2025-49928crocoblockjetwoobuilder+1
EPSS score
0.22%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows DOM-Based XSS.This issue affects JetWooBuilder: from n/a through <= 2.1.20.