Crocoblock. Jetimpex Inc. vulnerabilities

21 vulnerabilities

Known vulnerabilities in Crocoblock. Jetimpex Inc. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 11 products.

Products

11
9.3CVE-2026-54820crocoblock. jetimpex inc.jetbooking+1
EPSS score
0.40%
Unauthenticated SQL Injection in JetBooking <= 4.0.4.1 versions.
9.3CVE-2026-73365crocoblock. jetimpex inc.jetappointment+1
EPSS score
0.40%
Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions.
6.5CVE-2026-65465crocoblock. jetimpex inc.jetelements for elementor+1
EPSS score
0.22%
Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.1.1 versions.
7.2CVE-2026-65466crocoblock. jetimpex inc.jetbooking+1
EPSS score
0.19%
Custom role Server Side Request Forgery (SSRF) in JetBooking <= 4.1.2 versions.
5.3CVE-2026-65468crocoblock. jetimpex inc.jetbooking+1
EPSS score
0.29%
Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions.
6.4CVE-2026-65467crocoblock. jetimpex inc.jetengine+1
EPSS score
0.19%
Contributor Server Side Request Forgery (SSRF) in JetEngine <= 3.8.11 versions.
9.3CVE-2026-56068crocoblock. jetimpex inc.jetengine+1
EPSS score
0.40%
Unauthenticated SQL Injection in JetEngine <= 3.8.10.2 versions.
9.3CVE-2026-56067crocoblock. jetimpex inc.jetsmartfilters+1
EPSS score
0.45%
Unauthenticated SQL Injection in JetSmartFilters <= 3.8.3 versions.
6.5CVE-2026-66573crocoblock. jetimpex inc.jettabs+1
EPSS score
0.22%
Contributor Cross Site Scripting (XSS) in JetTabs <= 2.3.3.1 versions.
6.5CVE-2026-66579crocoblock. jetimpex inc.jetelements for elementor+1
EPSS score
0.22%
Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.2.1 versions.
7.2CVE-2026-66581crocoblock. jetimpex inc.jetengine+1
EPSS score
0.25%
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.1 versions.
6.5CVE-2026-66572crocoblock. jetimpex inc.jetblog+1
EPSS score
0.22%
Contributor Cross Site Scripting (XSS) in JetBlog <= 2.4.10 versions.
9.8CVE-2026-66613crocoblock. jetimpex inc.jetengine+1
EPSS score
0.86%
Unauthenticated Remote Code Execution (RCE) in JetEngine <= 3.8.14 versions.
6.5CVE-2026-66577crocoblock. jetimpex inc.jetsearch+1
EPSS score
0.22%
Contributor Cross Site Scripting (XSS) in JetSearch <= 3.6.3 versions.
6.5CVE-2026-66576crocoblock. jetimpex inc.jetblocks for elementor+1
EPSS score
0.22%
Contributor Cross Site Scripting (XSS) in JetBlocks For Elementor <= 1.5.2 versions.
6.5CVE-2026-57354crocoblock. jetimpex inc.jetreviews+1
EPSS score
0.22%
Subscriber Cross Site Scripting (XSS) in JetReviews <= 3.0.0.1 versions.
6.5CVE-2026-93618crocoblock. jetimpex inc.jettricks+1
EPSS score
0.16%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimpex Inc. JetTricks allows Stored XSS. This issue affects JetTricks: from n/a through 2.0.1.
7.2CVE-2026-28082crocoblock. jetimpex inc.jetengine+1
EPSS score
0.25%
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.13.1 versions.
7.2CVE-2026-97237crocoblock. jetimpex inc.jetengine+1
EPSS score
0.18%
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.
6.4CVE-2026-97238crocoblock. jetimpex inc.jetengine+1
EPSS score
0.17%
Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.