All products

jet-engine

WordPress · Plugin
45 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
JetEngine <= 3.9.0.1 - Authenticated (Contributor+) SQL InjectionCVE-2026-39736 jet-engine WordPress Medium Fix reported
JetEngine <= 3.9.0.1 - Missing AuthorizationCVE-2026-39735 jet-engine WordPress Medium Fix reported
JetEngine <= 3.9.0 - Authenticated (Contributor+) SQL InjectionCVE-2026-115608 jet-engine WordPress Medium Fix reported
JetEngine <= 3.8.16 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-107870 jet-engine WordPress High Fix reported
JetEngine <= 3.8.15.3 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-97265 jet-engine WordPress High Fix reported
JetEngine <= 3.8.14.3 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2026-97238 jet-engine WordPress Medium Fix reported
JetEngine <= 3.8.14.3 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-97237 jet-engine WordPress High Fix reported
JetEngine <= 3.8.14.2 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-81760 jet-engine WordPress High Fix reported
JetEngine <= 3.8.14 - Unauthenticated Remote Code ExecutionCVE-2026-66613 jet-engine WordPress Critical Fix reported
JetEngine <= 3.8.14.1 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-66581 jet-engine WordPress High Fix reported
JetEngine < 3.8.14 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2026-18202 jet-engine WordPress Medium Fix reported
JetEngine <= 3.8.13.0 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-17019 jet-engine WordPress High Fix reported
JetEngine < 3.8.12 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-14864 jet-engine WordPress Medium Fix reported
JetEngine <= 3.8.13.1 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-28082 jet-engine WordPress High Fix reported
JetEngine <= 3.8.11 - Authenticated (Contributor+) Sever-Side Request ForgeryCVE-2026-65467 jet-engine WordPress Medium Fix reported
JetEngine <= 3.8.10.2 - Unauthenticated SQL InjectionCVE-2026-56068 jet-engine WordPress High Fix reported
JetEngine <= 3.8.10.1 - Unauthenticated SQL InjectionCVE-2026-54187 jet-engine WordPress High Fix reported
JetEngine <= 3.8.10 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-54188 jet-engine WordPress High Fix reported
JetEngine <= 3.8.10 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-54189 jet-engine WordPress High Fix reported
JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX EndpointCVE-2026-12360 jet-engine WordPress High Fix reported