Advisories · Technology

Crocoblock JetElements For Elementor.

Every CVE that names Crocoblock JetElements For Elementor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-39737 CVE record

CVSS 6.5 Medium

WordPress JetElements For Elementor plugin <= 2.9.2.6 - Cross Site Scripting (XSS) vulnerability
- Crocoblock JetElements For Elementor
- Cross-site scripting (XSS)
Not analysed yet 29 Oct 2026
CVE-2026-114707 CVE record

CVSS 6.5 Medium

WordPress JetElements For Elementor plugin <= 2.9.2.5 - Cross Site Scripting (XSS) vulnerability
- Crocoblock JetElements For Elementor
- Cross-site scripting (XSS)
Not analysed yet 26 Oct 2026
CVE-2026-111414 CVE record

CVSS 6.5 Medium

WordPress JetElements For Elementor plugin <= 2.9.2.4 - Cross Site Scripting (XSS) vulnerability
- Crocoblock JetElements For Elementor
- Cross-site scripting (XSS)
Not analysed yet 19 Oct 2026
CVE-2026-107866 CVE record

CVSS 6.5 Medium

WordPress JetElements For Elementor plugin <= 2.9.2.3 - Cross Site Scripting (XSS) vulnerability
- Crocoblock JetElements For Elementor
- Cross-site scripting (XSS)
Not analysed yet 12 Oct 2026
CVE-2026-105879 CVE record

CVSS 6.5 Medium

WordPress JetElements For Elementor plugin <= 2.9.2.2 - Cross Site Scripting (XSS) vulnerability
- Crocoblock JetElements For Elementor
- Cross-site scripting (XSS)
Not analysed yet 6 Oct 2026
CVE-2026-24958 CVE record

CVSS 6.5 Medium

WordPress JetElements For Elementor plugin <= 2.7.12.2 - Cross Site Scripting (XSS) vulnerability
- Crocoblock JetElements For Elementor
- Cross-site scripting (XSS)
Not analysed yet 3 Feb 2026
CVE-2025-64355 CVE record

CVSS 6.5 Medium

WordPress JetElements For Elementor plugin <= 2.7.12 - Cross Site Scripting (XSS) vulnerability
- Crocoblock JetElements For Elementor
- Cross-site scripting (XSS)
Not analysed yet 18 Dec 2025
CVE-2025-49939 CVE record

CVSS 6.5 Medium

WordPress JetElements For Elementor plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability
- Crocoblock JetElements For Elementor
- Cross-site scripting (XSS)
Not analysed yet 22 Oct 2025
CVE-2025-53983 CVE record

CVSS 6.5 Medium

WordPress JetElements For Elementor <= 2.7.7 - Sensitive Data Exposure Vulnerability
- Crocoblock JetElements For Elementor
- Information disclosure
Not analysed yet 20 Aug 2025
CVE-2025-55714 CVE record

CVSS 6.5 Medium

WordPress JetElements For Elementor Plugin <= 2.7.9 - Cross Site Scripting (XSS) Vulnerability
- Crocoblock JetElements For Elementor
- Cross-site scripting (XSS)
Not analysed yet 14 Aug 2025
CVE-2025-53982 CVE record

CVSS 6.5 Medium

WordPress JetElements For Elementor plugin <= 2.7.7 - Cross Site Scripting (XSS) Vulnerability
- Crocoblock JetElements For Elementor
- Cross-site scripting (XSS)
Not analysed yet 16 Jul 2025
CVE-2025-39447 CVE record

CVSS 7.5 High

WordPress JetElements For Elementor plugin <= 2.7.4.1 - Broken Access Control Vulnerability
- Crocoblock JetElements For Elementor
- Broken access control
Not analysed yet 19 May 2025
CVE-2025-39448 CVE record

CVSS 6.5 Medium

WordPress JetElements For Elementor plugin <= 2.7.4.1 - Cross Site Scripting (XSS) vulnerability
- Crocoblock JetElements For Elementor
- Cross-site scripting (XSS)
Not analysed yet 19 May 2025
CVE-2023-48759 CVE record

CVSS 7.5 High

WordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Arbitrary Attachment Download vulnerability
- Crocoblock JetElements For Elementor
- Broken access control
Not analysed yet 19 Jun 2024
CVE-2023-48760 CVE record

CVSS 8.2 High

WordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Broken Access Control vulnerability
- Crocoblock JetElements For Elementor
- Broken access control
Not analysed yet 19 Jun 2024
CVE-2023-48761 CVE record

CVSS 6.3 Medium

WordPress JetElements For Elementor plugin <= 2.6.13 - Broken Access Control vulnerability
- Crocoblock JetElements For Elementor
- Broken access control
Not analysed yet 19 Jun 2024
CVE-2023-39157 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

WordPress JetElements For Elementor Plugin <= 2.6.10 is vulnerable to Remote Code Execution (RCE)
- Crocoblock JetElements For Elementor
- Code injection
Not analysed yet 31 Dec 2023
CVE-2023-48762 CVE record

CVSS 6.3 Medium

WordPress JetElements For Elementor Plugin <= 2.6.13 is vulnerable to Cross Site Request Forgery (CSRF)
- Crocoblock JetElements For Elementor
- Cross-site request forgery (CSRF)
Not analysed yet 18 Dec 2023