Search Results (23 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-1406 1 Crocoblock 1 Jetengine For Elementor 2025-02-11 8.8 High
The JetEngine WordPress plugin before 3.1.3.1 includes uploaded files without adequately ensuring that they are not executable, leading to a remote code execution vulnerability.
CVE-2021-41844 1 Crocoblock 1 Jetengine 2024-11-21 9.8 Critical
Crocoblock JetEngine before 2.9.1 does not properly validate and sanitize form data.
CVE-2021-38607 1 Crocoblock 1 Jetengine 2024-11-21 5.4 Medium
Crocoblock JetEngine before 2.6.1 allows XSS by remote authenticated users via a custom form input.