Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

JetEngine — Vulnerabilities & Security Advisories 45

All 45 CVE vulnerabilities found in JetEngine, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting the JetEngine plugin, a WordPress extension developed by Crocoblock, specifically focusing on code execution and privilege escalation weaknesses. The collection encompasses a comprehensive range of reported issues discovered between the plugin's initial public release and the current date, including remote code execution, cross-site scripting, and unauthorized access flaws. Visitors can utilize this resource to track the vendor's historical security advisories, analyze the characteristics of specific weakness classes prevalent in WordPress ecosystem extensions, or review the complete vulnerability timeline for JetEngine to assess long-term risk. The data presented here serves as a centralized reference for security researchers, system administrators, and developers who need to understand the security posture of this specific product without navigating multiple fragmented sources. By consolidating these findings, the page facilitates efficient impact analysis and helps organizations prioritize remediation efforts based on the severity and nature of the disclosed defects. This aggregation supports proactive security management by providing clear visibility into how the product has evolved from a security perspective over time. Users seeking to maintain secure WordPress environments will find this historical record essential for making informed decisions regarding plugin deployment, updates, and potential replacement strategies.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2026-32355 WordPress JetEngine plugin < 3.8.4.1 - Deserialization of untrusted data vulnerability CWE-502 8.8 High 2026-03-13
CVE-2026-28134 WordPress JetEngine plugin <= 3.7.2 - Remote Code Execution (RCE) vulnerability CWE-94 8.5 High 2026-03-05
CVE-2025-68495 WordPress JetEngine plugin <= 3.8.0 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-02-20
CVE-2025-67923 WordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-01-22
CVE-2025-69333 WordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerability CWE-862 4.3 Medium 2026-01-07
CVE-2025-49938 WordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2025-10-22
CVE-2025-53194 WordPress JetEngine <= 3.7.0 - Remote Code Execution (RCE) Vulnerability CWE-82 8.5 High 2025-08-20
CVE-2025-53195 WordPress JetEngine plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium 2025-08-20
CVE-2025-53196 WordPress JetEngine <= 3.7.0 - Sensitive Data Exposure Vulnerability CWE-201 6.5 Medium 2025-08-20
CVE-2025-54688 WordPress JetEngine Plugin plugin <= 3.7.1.2 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium 2025-08-14
CVE-2025-26870 WordPress JetEngine plugin <= 3.6.4.1 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2025-04-15
CVE-2025-0369 Jet Engine <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via list_tag Parameter CWE-79 6.4 Medium 2025-01-18
CVE-2023-48758 WordPress JetEngine plugin <= 3.2.4 - Broken Access Control vulnerability CWE-862 7.1 High 2025-01-02
CVE-2023-48757 WordPress JetEngine plugin <= 3.2.4 - Privilege Escalation vulnerability CWE-269 8.8 High 2024-05-17
CVE-2023-1406 JetEngine < 3.1.3.1 - Author+ Remote Code Execution 9.8 - 2023-04-10

All 45 known CVE vulnerabilities affecting JetEngine with full Chinese analysis, references, and POCs where available.