Advisories · Technology

Crocoblock JetBlog.

Every CVE that names Crocoblock JetBlog among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-94661 CVE record

CVSS 7.1 High

WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability
- Crocoblock JetBlog
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2026
CVE-2025-68503 CVE record

CVSS 6.5 Medium

WordPress JetBlog plugin <= 2.4.7 - Broken Access Control vulnerability
- Crocoblock JetBlog
- Broken access control
Not analysed yet 29 Dec 2025
CVE-2025-49933 CVE record

CVSS 6.5 Medium

WordPress JetBlog plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability
- Crocoblock JetBlog
- Cross-site scripting (XSS)
Not analysed yet 22 Oct 2025
CVE-2025-49932 CVE record

CVSS 6.5 Medium

WordPress JetBlog plugin <= 2.4.4.1 - Cross Site Scripting (XSS) vulnerability
- Crocoblock JetBlog
- Cross-site scripting (XSS)
Not analysed yet 22 Oct 2025
CVE-2025-26958 CVE record

CVSS 7.5 High

WordPress JetBlog plugin <= 2.4.3 - Broken Access Control Vulnerability
- Crocoblock JetBlog
- Broken access control
Not analysed yet 15 Apr 2025
CVE-2025-26744 CVE record

CVSS 6.5 Medium

WordPress JetBlog plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability
- Crocoblock JetBlog
- Cross-site scripting (XSS)
Not analysed yet 15 Apr 2025