Advisories · Technology

Crocoblock. Jetimpex Inc. JetEngine.

Every CVE that names Crocoblock. Jetimpex Inc. JetEngine among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-97265 CVE record

CVSS 6.5 Medium

WordPress JetEngine plugin <= 3.8.15.3 - Cross Site Scripting (XSS) vulnerability
- Crocoblock. Jetimpex Inc. JetEngine
- Cross-site scripting (XSS)
Not analysed yet 30 Sept 2026
CVE-2026-97238 CVE record

CVSS 5.5 Medium

WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability
- Crocoblock. Jetimpex Inc. JetEngine
- Cross-site scripting (XSS)
Not analysed yet 30 Sept 2026
CVE-2026-66581 CVE record

CVSS 7.1 High

WordPress JetEngine plugin <= 3.8.14.1 - Cross Site Scripting (XSS) vulnerability
- Crocoblock. Jetimpex Inc. JetEngine
- Cross-site scripting (XSS)
Not analysed yet 20 Aug 2026
CVE-2026-66613 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress JetEngine plugin <= 3.8.14 - Remote Code Execution (RCE) vulnerability
- Crocoblock. Jetimpex Inc. JetEngine
- Code injection
Not analysed yet 19 Aug 2026
CVE-2026-28082 CVE record

CVSS 7.1 High

WordPress JetEngine plugin <= 3.8.13.1 - Cross Site Scripting (XSS) vulnerability
- Crocoblock. Jetimpex Inc. JetEngine
- Cross-site scripting (XSS)
Not analysed yet 6 Aug 2026
CVE-2026-65467 CVE record

CVSS 4.9 Medium

WordPress JetEngine plugin <= 3.8.11 - Server Side Request Forgery (SSRF) vulnerability
- Crocoblock. Jetimpex Inc. JetEngine
- Server-side request forgery (SSRF)
Not analysed yet 23 Jul 2026
CVE-2026-56068 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress JetEngine plugin <= 3.8.10.2 - SQL Injection vulnerability
- Crocoblock. Jetimpex Inc. JetEngine
- SQL injection
Not analysed yet 26 Jun 2026