Crocoblock vulnerabilities

CVEs per yearBy the year they were published

1. 20234
2. 202414
3. 202560
4. 202647

Newest CVEs

• CVE-2026-123484

  WordPress JetFormBuilder plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability

  Crocoblock · JetFormBuilder

  High7.1
• CVE-2026-123860

  WordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerability

  Crocoblock · JetFormBuilder

  Medium5.3
• CVE-2026-123861

  WordPress JetFormBuilder – Hierarchical Select plugin <= 1.0.10 - Insecure Direct Object References (IDOR) vulnerability

  CrocoBlock · JetFormBuilder – Hierarchical Select

  Medium5.3
• CVE-2026-123483

  WordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerability

  Crocoblock · JetFormBuilder

  Medium5.3
• CVE-2026-123477

  WordPress JetEngine plugin <= 3.9.0.2 - Cross Site Scripting (XSS) vulnerability

  Crocoblock · JetEngine

  Medium6.5
• CVE-2026-119481

  WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability

  Crocoblock · JetFormBuilder

  Critical9.8
• CVE-2026-119480

  WordPress JetFormBuilder plugin <= 3.6.7.1 - Attachment Deletion Via Media-Field Preset vulnerability

  Crocoblock · JetFormBuilder

  Medium6.5
• CVE-2026-119479

  WordPress JetFormBuilder plugin <= 3.6.7.1 - Content Injection vulnerability

  Crocoblock · JetFormBuilder

  Medium5.3
• CVE-2026-119482

  WordPress JetFormBuilder plugin <= 3.6.7.1 - Broken Access Control vulnerability

  Crocoblock · JetFormBuilder

  Medium5.3
• CVE-2026-39737

  WordPress JetElements For Elementor plugin <= 2.9.2.6 - Cross Site Scripting (XSS) vulnerability

  Crocoblock · JetElements For Elementor

  Medium6.5