[ Vendor · 13 CVEs ]
Crocoblock
CVEs affecting Crocoblock published in the last 30 days, plus any Crocoblock CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111414 | 19 Oct 2026 | CVSS 6.5 | Crocoblock JetElements For ElementorImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor… | |
| CVE-2026-110890 | 15 Oct 2026 | CVSS 6.5 | Crocoblock JetSmartFiltersImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmartFilters jet-smart-filters… | |
| CVE-2026-107870 | 14 Oct 2026 | CVSS 7.1 | Crocoblock JetEngineImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows… | |
| CVE-2026-107867 | 14 Oct 2026 | CVSS 7.1 | Crocoblock JetProductTablesImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetProductTables jet-product-tables… | |
| CVE-2026-107431 | 14 Oct 2026 | CVSS 7.5 | Crocoblock JetFormBuilderMissing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security… | |
| CVE-2026-107865 | 12 Oct 2026 | CVSS 6.5 | Crocoblock JetMenuImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetMenu jet-menu allows Stored… | |
| CVE-2026-107866 | 12 Oct 2026 | CVSS 6.5 | Crocoblock JetElements For ElementorImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor… | |
| CVE-2026-94661 | 9 Oct 2026 | CVSS 7.1 | Crocoblock JetBlogImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog jet-blog allows Reflected… | |
| CVE-2026-94667 | 9 Oct 2026 | CVSS 6.5 | Crocoblock JetReviewsImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetReviews jet-reviews allows Stored… | |
| CVE-2026-62049 | 9 Oct 2026 | CVSS 6.5 | Crocoblock JetBlocks For ElementorImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlocks For Elementor jet-blocks… | |
| CVE-2026-105879 | 6 Oct 2026 | CVSS 6.5 | Crocoblock JetElements For ElementorImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor… | |
| CVE-2026-93875 | 2 Oct 2026 | CVSS 7.2 | Crocoblock JetAppointmentThe JetAppointment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'friendlyTime' parameter in all versions up to, and… | |
| CVE-2026-97237 | 30 Sep 2026 | CVSS 7.1 | Crocoblock JetEngineImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows… |