目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Crocoblock 厂商漏洞列表 / CVE 中文分析 124

Crocoblock 厂商相关 124 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Crocoblock 专注于为 WordPress 提供页面构建及数据展示插件，其生态因广泛部署而成为攻击热点。历史漏洞多集中于未授权访问、SQL 注入及跨站脚本攻击，部分高危漏洞甚至允许远程代码执行。鉴于其已收录 87 条 CVE，表明组件更新滞后或代码审计不足。用户需密切关注官方补丁，及时升级以修复已知权限绕过及数据泄露风险，确保站点安全。

Top products by Crocoblock: JetEngine JetElements For Elementor JetFormBuilder JetBlocks For Elementor JetTabs JetSearch JetPopup JetBlog JetSmartFilters JetWooBuilder JetReviews JetElements JetTricks JetMenu JetProductGallery JetGridBuilder JetFormBuilder — Dynamic Blocks Form Builder JetCompareWishlist JetWidgets for Elementor and WooCommerce JetThemeCore JetBooking JetAppointment JetProductTables JetFormBuilder – Hierarchical Select
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-123860 WordPress JetFormBuilder 3.6.8 内容注入漏洞 — JetFormBuilder CWE-80 5.3 Medium 2026-11-07
CVE-2026-123861 JetFormBuilder 插件 1.0.10 不安全的直接对象引用漏洞 — JetFormBuilder – Hierarchical Select CWE-639 5.3 Medium 2026-11-07
CVE-2026-123483 WordPress JetFormBuilder 3.6.8 内容注入漏洞 — JetFormBuilder CWE-80 5.3 Medium 2026-11-07
CVE-2026-123477 JetEngine <= 3.9.0.2 跨站脚本漏洞 — JetEngine CWE-79 6.5 Medium 2026-11-07
CVE-2026-119481 WordPress JetFormBuilder 3.6.7.1 权限提升漏洞 — JetFormBuilder CWE-266 9.8 Critical 2026-11-04
CVE-2026-119480 WordPress JetFormBuilder 3.6.7.1 附件删除漏洞 — JetFormBuilder CWE-22 6.5 Medium 2026-11-01
CVE-2026-119479 JetFormBuilder 3.6.7.1 内容注入漏洞 — JetFormBuilder CWE-80 5.3 Medium 2026-10-30
CVE-2026-119482 WordPress JetFormBuilder 3.6.7.1 越权漏洞 — JetFormBuilder CWE-862 5.3 Medium 2026-10-30
CVE-2026-39737 JetElements 2.9.2.6 跨站脚本漏洞 — JetElements For Elementor CWE-79 6.5 Medium 2026-10-29
CVE-2026-39736 WordPress JetEngine <=3.9.0.1 SQL 注入漏洞 — JetEngine CWE-89 8.5 High 2026-10-29
CVE-2026-116857 WordPress JetSmartFilters 3.8.6.2 跨站脚本漏洞 — JetSmartFilters CWE-79 6.5 Medium 2026-10-29
CVE-2026-39735 JetEngine 3.9.0.1 访问控制失效漏洞 — JetEngine CWE-862 6.5 Medium 2026-10-29
CVE-2026-114708 WordPress JetSmartFilters 3.8.6.1 跨站脚本漏洞 — JetSmartFilters CWE-79 6.5 Medium 2026-10-26
CVE-2026-114707 WordPress JetElements 2.9.2.5 跨站脚本漏洞 — JetElements For Elementor CWE-79 6.5 Medium 2026-10-26
CVE-2026-115608 WordPress JetEngine 3.9.0 SQL 注入漏洞 — JetEngine CWE-89 8.5 High 2026-10-26
CVE-2026-111414 WordPress JetElements 插件 2.9.2.4 跨站脚本漏洞 — JetElements For Elementor CWE-79 6.5 Medium 2026-10-19
CVE-2026-110890 WordPress JetSmartFilters <=3.8.6 跨站脚本漏洞 — JetSmartFilters CWE-79 6.5 Medium 2026-10-15
CVE-2026-107870 WordPress JetEngine插件 <= 3.8.16 跨站脚本漏洞 — JetEngine CWE-79 7.1 High 2026-10-14
CVE-2026-107867 WordPress JetProductTables <=1.2.4 跨站脚本漏洞 — JetProductTables CWE-79 7.1 High 2026-10-14
CVE-2026-107431 WordPress JetFormBuilder插件<=3.6.6访问控制漏洞 — JetFormBuilder CWE-862 7.5 High 2026-10-14
CVE-2026-107865 WordPress JetMenu插件<=3.0.5跨站脚本漏洞 — JetMenu CWE-79 6.5 Medium 2026-10-12
CVE-2026-107866 WordPress JetElements插件<=2.9.2.3 跨站脚本漏洞 — JetElements For Elementor CWE-79 6.5 Medium 2026-10-12
CVE-2026-94667 WordPress JetReviews插件<=3.1.2跨站脚本漏洞 — JetReviews CWE-79 6.5 Medium 2026-10-09
CVE-2026-94661 WordPress JetBlog <= 2.4.10 跨站脚本漏洞 — JetBlog CWE-79 7.1 High 2026-10-09
CVE-2026-62049 WordPress JetBlocks For Elementor 1.5.2.1 跨站脚本漏洞 — JetBlocks For Elementor CWE-79 6.5 Medium 2026-10-09
CVE-2026-105879 WordPress JetElements插件2.9.2.2及之前版本存在跨站脚本漏洞 — JetElements For Elementor CWE-79 6.5 Medium 2026-10-06
CVE-2026-93875 JetAppointment <=2.5.2.1 通过‘friendlyTime’参数的未授权存储型跨站脚本漏洞 — JetAppointment CWE-79 7.2 High 2026-10-02
CVE-2026-97237 WordPress JetEngine 3.8.14.3 XSS漏洞 — JetEngine CWE-79 7.1 High 2026-09-30
CVE-2026-84817 WordPress JetFormBuilder 跨站脚本漏洞 — JetFormBuilder CWE-79 7.1 High 2026-09-08
CVE-2026-27347 Crocoblock JetPopup 授权问题漏洞 — JetPopup CWE-862 5.3 Medium 2026-09-04

本页汇总了 Crocoblock 厂商截至目前公开的全部 124 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。