Advisories · Technology

Crocoblock JetWooBuilder.

Every CVE that names Crocoblock JetWooBuilder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-49928 CVE record

CVSS 6.5 Medium

WordPress JetWooBuilder plugin <= 2.1.20 - Cross Site Scripting (XSS) vulnerability
- Crocoblock JetWooBuilder
- Cross-site scripting (XSS)
Not analysed yet 22 Oct 2025
CVE-2025-49927 CVE record

CVSS 6.5 Medium

WordPress JetWooBuilder plugin <= 2.1.20.1 - Cross Site Scripting (XSS) vulnerability
- Crocoblock JetWooBuilder
- Cross-site scripting (XSS)
Not analysed yet 22 Oct 2025
CVE-2025-53998 CVE record

CVSS 6.5 Medium

WordPress JetWooBuilder <= 2.1.20 - Sensitive Data Exposure Vulnerability
- Crocoblock JetWooBuilder
- Information disclosure
Not analysed yet 20 Aug 2025
CVE-2025-39449 CVE record

CVSS 7.5 High

WordPress JetWooBuilder plugin <= 2.1.18 - Broken Access Control Vulnerability
- Crocoblock JetWooBuilder
- Broken access control
Not analysed yet 19 May 2025
CVE-2025-31016 CVE record

CVSS 7.5 High

WordPress JetWooBuilder plugin <= 2.1.18 - Local File Inclusion vulnerability
- Crocoblock JetWooBuilder
- File inclusion
Not analysed yet 31 Mar 2025