Crocoblock. Jetimpex Inc. Jetengine vulnerabilities
8 vulnerabilities
Known vulnerabilities in Crocoblock. Jetimpex Inc. Jetengine, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2026-65467crocoblock. jetimpex inc. · jetengine +1 moreWordPress JetEngine plugin <= 3.8.11 - Server Side Request Forgery (SSRF) vulnerabilityContributor Server Side Request Forgery (SSRF) in JetEngine <= 3.8.11 versions.EPSS0.19%CriticalCVE-2026-56068crocoblock. jetimpex inc. · jetengine +1 moreWordPress JetEngine plugin <= 3.8.10.2 - SQL Injection vulnerabilityUnauthenticated SQL Injection in JetEngine <= 3.8.10.2 versions.EPSS0.40%HighCVE-2026-66581crocoblock. jetimpex inc. · jetengine +1 moreWordPress JetEngine plugin <= 3.8.14.1 - Cross Site Scripting (XSS) vulnerabilityUnauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.1 versions.EPSS0.25%CriticalCVE-2026-66613crocoblock. jetimpex inc. · jetengine +1 moreWordPress JetEngine plugin <= 3.8.14 - Remote Code Execution (RCE) vulnerabilityUnauthenticated Remote Code Execution (RCE) in JetEngine <= 3.8.14 versions.EPSS0.86%HighCVE-2026-28082crocoblock. jetimpex inc. · jetengine +1 moreWordPress JetEngine plugin <= 3.8.13.1 - Cross Site Scripting (XSS) vulnerabilityUnauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.13.1 versions.EPSS0.25%MediumCVE-2026-97238crocoblock. jetimpex inc. · jetengine +1 moreWordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerabilitySubscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.EPSS0.17%HighCVE-2026-97265crocoblock. jetimpex inc. · jetengine +1 moreWordPress JetEngine plugin <= 3.8.15.3 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS.
This issue affects JetEngine: from n/a through 3.8.15.3.EPSS0.13%