Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

JetEngine — Vulnerabilities & Security Advisories 36

All 36 CVE vulnerabilities found in JetEngine, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities affecting JetEngine, a WordPress plugin that extends the capabilities of the Jetpack ecosystem by enabling custom post types and dynamic data handling. It collects reported security flaws ranging from cross-site scripting and privilege escalation to injection attacks, covering advisories published within the recent five-year window. Visitors can utilize this resource to monitor the specific security posture of the JetEngine plugin, analyze the frequency and severity of weaknesses in dynamic content generation tools, and review the historical pattern of patches issued by the developer. By examining this consolidated data, developers and security administrators gain insights into how common application logic errors manifest in WordPress extensions and can identify recurring themes in reported incidents. This collection serves as a reference point for understanding the evolution of security risks associated with third-party WordPress components, helping stakeholders assess the long-term stability and safety of systems relying on such plugins. The data is organized to facilitate clear analysis of vulnerability trends without requiring individual CVE lookups, providing a broader perspective on the product’s security lifecycle and the types of exploits most commonly targeted in its architecture.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2026-81760 WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-08-28
CVE-2026-66581 WordPress JetEngine plugin <= 3.8.14.1 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-08-20
CVE-2026-66613 WordPress JetEngine plugin <= 3.8.14 - Remote Code Execution (RCE) vulnerability CWE-1336 9.8 Critical 2026-08-19
CVE-2026-18202 JetEngine < 3.8.14 - Author+ Stored XSS via SVG Upload - - 2026-08-19
CVE-2026-17019 JetEngine < 3.8.13.1 - Unauthenticated Stored XSS via Form File Upload (SVG) - - 2026-08-10
CVE-2026-28082 WordPress JetEngine plugin <= 3.8.13.1 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-08-06
CVE-2026-14864 JetEngine < 3.8.12 - Contributor+ Stored XSS via jet_engine Shortcode - - 2026-08-02
CVE-2026-65467 WordPress JetEngine plugin <= 3.8.11 - Server Side Request Forgery (SSRF) vulnerability CWE-918 4.9 Medium 2026-07-23
CVE-2026-56068 WordPress JetEngine plugin <= 3.8.10.2 - SQL Injection vulnerability CWE-89 9.3 Critical 2026-06-26
CVE-2026-54189 WordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-06-17
CVE-2026-54188 WordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-06-17
CVE-2026-54187 WordPress JetEngine plugin <= 3.8.10.1 - SQL Injection vulnerability CWE-89 9.3 Critical 2026-06-17
CVE-2026-52706 WordPress JetEngine plugin <= 3.8.10 - PHP Object Injection vulnerability CWE-502 9.8 Critical 2026-06-17
CVE-2026-49084 WordPress JetEngine plugin < 3.8.9.1 - SQL Injection vulnerability CWE-89 9.3 Critical 2026-06-17
CVE-2026-49076 WordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerability CWE-89 9.3 Critical 2026-06-17
CVE-2026-49075 WordPress JetEngine plugin <= 3.8.9.1 - PHP Object Injection vulnerability CWE-502 9.8 Critical 2026-06-17
CVE-2026-49074 WordPress JetEngine plugin <= 3.8.9.1 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-06-17
CVE-2026-12360 JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint CWE-89 7.5 High 2026-06-17
CVE-2026-42774 WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerability CWE-89 9.3 Critical 2026-05-25
CVE-2026-4352 JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' Parameter CWE-89 7.5 High 2026-04-14
CVE-2026-4662 JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' Parameter CWE-89 7.5 High 2026-03-24
CVE-2026-32355 WordPress JetEngine plugin < 3.8.4.1 - Deserialization of untrusted data vulnerability CWE-502 8.8 High 2026-03-13
CVE-2026-28134 WordPress JetEngine plugin <= 3.7.2 - Remote Code Execution (RCE) vulnerability CWE-94 8.5 High 2026-03-05
CVE-2025-68495 WordPress JetEngine plugin <= 3.8.0 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-02-20
CVE-2025-67923 WordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-01-22
CVE-2025-69333 WordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerability CWE-862 4.3 Medium 2026-01-07
CVE-2025-49938 WordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2025-10-22
CVE-2025-53194 WordPress JetEngine <= 3.7.0 - Remote Code Execution (RCE) Vulnerability CWE-82 8.5 High 2025-08-20
CVE-2025-53195 WordPress JetEngine plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium 2025-08-20
CVE-2025-53196 WordPress JetEngine <= 3.7.0 - Sensitive Data Exposure Vulnerability CWE-201 6.5 Medium 2025-08-20

All 36 known CVE vulnerabilities affecting JetEngine with full Chinese analysis, references, and POCs where available.