CVE-2026-84817WordPress JetFormBuilder plugin <= 3.6.5.1 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetFormBuilder Published 09/08/2026 Severity High CVE-2026-27347WordPress JetPopup plugin <= 2.0.20.2 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product J JetPopup Published 09/04/2026 Severity Medium CVE-2026-81760WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetEngine Published 08/28/2026 Severity High CVE-2026-61977WordPress JetSearch plugin <= 3.6.1.2 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product J JetSearch Published 07/13/2026 Severity Medium CVE-2026-61976WordPress JetBlocks For Elementor plugin <= 1.5.0 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product J JetBlocks For Elementor Published 07/13/2026 Severity Medium CVE-2026-61975WordPress JetReviews plugin <= 3.0.1 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product J JetReviews Published 07/13/2026 Severity Medium CVE-2026-12360JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint Exploitation status Not known exploited Fix Affected product J JetEngine Published 06/17/2026 Severity High CVE-2026-42774WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product J JetEngine Published 05/25/2026 Severity Critical CVE-2026-4352JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' Parameter Exploitation status Not known exploited Fix Affected product J JetEngine Published 04/14/2026 Severity High CVE-2026-4662JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' Parameter Exploitation status Not known exploited Fix Affected product J JetEngine Published 03/24/2026 Severity High CVE-2026-32355WordPress JetEngine plugin < 3.8.4.1 - Deserialization of untrusted data vulnerability Exploitation status Not known exploited Fix Affected product J JetEngine Published 03/13/2026 Severity High CVE-2026-3496JetBooking <= 4.0.3 - Unauthenticated SQL Injection via 'check_in_date' Parameter Exploitation status Not known exploited Fix Affected product J JetBooking Published 03/11/2026 Severity High CVE-2026-28134WordPress JetEngine plugin <= 3.7.2 - Remote Code Execution (RCE) vulnerability Exploitation status Not known exploited Fix Affected product J JetEngine Published 03/05/2026 Severity High CVE-2025-68495WordPress JetEngine plugin <= 3.8.0 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetEngine Published 02/20/2026 Severity High CVE-2026-24958WordPress JetElements For Elementor plugin <= 2.7.12.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetElements For Elementor Published 02/03/2026 Severity Medium CVE-2025-67923WordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetEngine Published 01/22/2026 Severity High CVE-2025-69333WordPress JetEngine plugin <= 3.8.1.1 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product J JetEngine Published 01/07/2026 Severity Medium CVE-2025-68498WordPress JetTabs plugin <= 2.2.12 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product J JetTabs Published 12/29/2025 Severity Medium CVE-2025-68499WordPress JetTabs plugin <= 2.2.12 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetTabs Published 12/29/2025 Severity Medium CVE-2025-68502WordPress JetPopup plugin <= 2.0.20.1 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix Affected product J JetPopup Published 12/29/2025 Severity Medium CVE-2025-68503WordPress JetBlog plugin <= 2.4.7 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product J JetBlog Published 12/29/2025 Severity Medium CVE-2025-68504WordPress JetSearch plugin <= 3.5.16 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetSearch Published 12/29/2025 Severity Medium CVE-2025-64355WordPress JetElements For Elementor plugin <= 2.7.12 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetElements For Elementor Published 12/18/2025 Severity Medium CVE-2025-49939WordPress JetElements For Elementor plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetElements For Elementor Published 10/22/2025 Severity Medium CVE-2025-49938WordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetEngine Published 10/22/2025 Severity Medium CVE-2025-49934WordPress JetBlocks For Elementor plugin <= 1.3.18 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetBlocks For Elementor Published 10/22/2025 Severity Medium CVE-2025-49933WordPress JetBlog plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetBlog Published 10/22/2025 Severity Medium CVE-2025-49932WordPress JetBlog plugin <= 2.4.4.1 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetBlog Published 10/22/2025 Severity Medium CVE-2025-49931WordPress JetSearch plugin <= 3.5.10 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product J JetSearch Published 10/22/2025 Severity Critical CVE-2025-49930WordPress JetSearch plugin <= 3.5.10 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetSearch Published 10/22/2025 Severity High CVE-2025-49928WordPress JetWooBuilder plugin <= 2.1.20 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetWooBuilder Published 10/22/2025 Severity Medium CVE-2025-49927WordPress JetWooBuilder plugin <= 2.1.20.1 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetWooBuilder Published 10/22/2025 Severity Medium CVE-2025-49921WordPress JetReviews plugin <= 3.0.0 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix Affected product J JetReviews Published 10/22/2025 Severity High CVE-2025-53194WordPress JetEngine <= 3.7.0 - Remote Code Execution (RCE) Vulnerability Exploitation status Not known exploited Fix Affected product J JetEngine Published 08/20/2025 Severity High CVE-2025-53195WordPress JetEngine plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product J JetEngine Published 08/20/2025 Severity Medium CVE-2025-53196WordPress JetEngine <= 3.7.0 - Sensitive Data Exposure Vulnerability Exploitation status Not known exploited Fix Affected product J JetEngine Published 08/20/2025 Severity Medium CVE-2025-53983WordPress JetElements For Elementor <= 2.7.7 - Sensitive Data Exposure Vulnerability Exploitation status Not known exploited Fix Affected product J JetElements For Elementor Published 08/20/2025 Severity Medium CVE-2025-53985WordPress JetTabs <= 2.2.9 - Sensitive Data Exposure Vulnerability Exploitation status Not known exploited Fix Affected product J JetTabs Published 08/20/2025 Severity Medium CVE-2025-53987WordPress JetMenu <= 2.4.11.1 - Sensitive Data Exposure Vulnerability Exploitation status Not known exploited Fix Affected product J JetMenu Published 08/20/2025 Severity Medium CVE-2025-53988WordPress JetBlocks For Elementor <= 1.3.18 - Sensitive Data Exposure Vulnerability Exploitation status Not known exploited Fix Affected product J JetBlocks For Elementor Published 08/20/2025 Severity Medium CVE-2025-53992WordPress JetTricks <= 1.5.4.1 - Sensitive Data Exposure Vulnerability Exploitation status Not known exploited Fix Affected product J JetTricks Published 08/20/2025 Severity Medium CVE-2025-53993WordPress JetPopup plugin <= 2.0.15 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product J JetPopup Published 08/20/2025 Severity Medium CVE-2025-53998WordPress JetWooBuilder <= 2.1.20 - Sensitive Data Exposure Vulnerability Exploitation status Not known exploited Fix Affected product J JetWooBuilder Published 08/20/2025 Severity Medium CVE-2025-54008WordPress JetSmartFilters <= 3.6.7 - Sensitive Data Exposure Vulnerability Exploitation status Not known exploited Fix Affected product J JetSmartFilters Published 08/20/2025 Severity Medium CVE-2025-54749WordPress JetProductGallery Plugin <= 2.2.0.2 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product J JetProductGallery Published 08/14/2025 Severity Medium CVE-2025-55714WordPress JetElements For Elementor Plugin <= 2.7.9 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product J JetElements For Elementor Published 08/14/2025 Severity Medium CVE-2025-54688WordPress JetEngine Plugin plugin <= 3.7.1.2 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product J JetEngine Published 08/14/2025 Severity Medium CVE-2025-54687WordPress JetTabs Plugin plugin <= 2.2.9.1 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product J JetTabs Published 08/14/2025 Severity Medium CVE-2025-54009WordPress JetSmartFilters plugin <= 3.6.8 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product J JetSmartFilters Published 07/16/2025 Severity Medium CVE-2025-53996WordPress JetSearch plugin <= 3.5.10.1 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product J JetSearch Published 07/16/2025 Severity Medium CVE-2025-53995WordPress JetPopup plugin <= 2.0.15.1 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product J JetPopup Published 07/16/2025 Severity Medium CVE-2025-53994WordPress JetPopup plugin <= 2.0.15 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product J JetPopup Published 07/16/2025 Severity Medium CVE-2025-53991WordPress JetTricks plugin <= 1.5.4.1 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product J JetTricks Published 07/16/2025 Severity Medium CVE-2025-53989WordPress JetBlocks For Elementor plugin <= 1.3.19 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product J JetBlocks For Elementor Published 07/16/2025 Severity Medium CVE-2025-53984WordPress JetTabs plugin <= 2.2.9 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product J JetTabs Published 07/16/2025 Severity Medium CVE-2025-53982WordPress JetElements For Elementor plugin <= 2.7.7 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product J JetElements For Elementor Published 07/16/2025 Severity Medium CVE-2025-39447WordPress JetElements For Elementor plugin <= 2.7.4.1 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product J JetElements For Elementor Published 05/19/2025 Severity High CVE-2025-39449WordPress JetWooBuilder plugin <= 2.1.18 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product J JetWooBuilder Published 05/19/2025 Severity High CVE-2025-39451WordPress JetBlocks For Elementor plugin <= 1.3.16 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product J JetBlocks For Elementor Published 05/19/2025 Severity High CVE-2025-39448WordPress JetElements For Elementor plugin <= 2.7.4.1 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetElements For Elementor Published 05/19/2025 Severity Medium CVE-2025-39450WordPress JetTabs plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetTabs Published 05/19/2025 Severity Medium CVE-2025-39396WordPress JetReviews plugin <= 2.3.6 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix Affected product J JetReviews Published 05/19/2025 Severity High CVE-2025-26953WordPress JetMenu plugin <= 2.4.9 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product J JetMenu Published 04/15/2025 Severity High CVE-2025-26870WordPress JetEngine plugin <= 3.6.4.1 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetEngine Published 04/15/2025 Severity Medium CVE-2025-26958WordPress JetBlog plugin <= 2.4.3 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product J JetBlog Published 04/15/2025 Severity High CVE-2025-26944WordPress JetPopup plugin <= 2.0.11 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product J JetPopup Published 04/15/2025 Severity High CVE-2025-26942WordPress JetTricks plugin <= 1.5.1 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product J JetTricks Published 04/15/2025 Severity High CVE-2025-26744WordPress JetBlog plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetBlog Published 04/15/2025 Severity Medium CVE-2025-22279WordPress JetCompareWishlist plugin <= 1.5.9 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix Affected product J JetCompareWishlist Published 04/10/2025 Severity High CVE-2025-30963WordPress JetSmartFilters plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetSmartFilters Published 03/31/2025 Severity Medium CVE-2025-31412WordPress JetProductGallery plugin <= 2.1.22 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetProductGallery Published 03/31/2025 Severity Medium CVE-2025-31016WordPress JetWooBuilder plugin <= 2.1.18 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix Affected product J JetWooBuilder Published 03/31/2025 Severity High CVE-2025-30987WordPress JetBlocks For Elementor plugin <= 1.3.16 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetBlocks For Elementor Published 03/31/2025 Severity Medium CVE-2025-31043WordPress JetSearch plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J JetSearch Published 03/31/2025 Severity Medium CVE-2025-0371Jet Elements <= 2.7.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets Exploitation status Not known exploited Fix Affected product J JetElements Published 01/21/2025 Severity Medium CVE-2025-0369Jet Engine <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via list_tag Parameter Exploitation status Not known exploited Fix Affected product J JetEngine Published 01/18/2025 Severity Medium CVE-2023-48758WordPress JetEngine plugin <= 3.2.4 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product J JetEngine Published 01/02/2025 Severity High CVE-2024-10323JetWidgets For Elementor <= 1.0.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload Exploitation status Not known exploited Fix Affected product J JetWidgets For Elementor Published 11/12/2024 Severity Medium CVE-2024-43221WordPress JetGridBuilder plugin <= 1.1.2 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix Affected product J JetGridBuilder Published 08/19/2024 Severity High CVE-2024-7144JetElements <= 2.6.20 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product J JetElements Published 08/16/2024 Severity Medium CVE-2024-7145JetElements <= 2.6.20 - Authenticated (Contributor+) Arbitrary Local File Inclusion Exploitation status Not known exploited Fix Affected product J JetElements Published 08/16/2024 Severity High CVE-2024-7146JetTabs <= 2.2.3 - Authenticated (Contributor+) Arbitrary Local File Inclusion Exploitation status Not known exploited Fix Affected product J JetTabs Published 08/16/2024 Severity High CVE-2024-7136JetSearch <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product J JetSearch Published 08/16/2024 Severity Medium CVE-2024-7147JetBlocks <= 1.3.12 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product J JetBlocks For Elementor Published 08/16/2024 Severity Medium CVE-2024-38772WordPress JetWidgets for Elementor and WooCommerce plugin <= 1.1.7 - Contributor+ Limited Local File Inclusion vulnerability Exploitation status Not known exploited Fix Affected product J JetWidgets for Elementor and WooCommerce Published 08/01/2024 Severity Medium CVE-2024-37497WordPress JetThemeCore plugin < 2.2.1 - Subscriber+ Arbitrary File Deletion vulnerability Exploitation status Not known exploited Fix Affected product J JetThemeCore Published 07/09/2024 Severity High CVE-2024-4626JetWidgets For Elementor <= 1.0.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_type and id Parameters Exploitation status Not known exploited Fix Affected product J JetWidgets For Elementor Published 06/20/2024 Severity Medium CVE-2023-48759WordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Arbitrary Attachment Download vulnerability Exploitation status Not known exploited Fix Affected product J JetElements For Elementor Published 06/19/2024 Severity High CVE-2023-48760WordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Broken Access Control vulnerability Exploitation status Public exploit Fix Affected product J JetElements For Elementor Published 06/19/2024 Severity High CVE-2023-48761WordPress JetElements For Elementor plugin <= 2.6.13 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product J JetElements For Elementor Published 06/19/2024 Severity Medium CVE-2023-48757WordPress JetEngine plugin <= 3.2.4 - Privilege Escalation vulnerability Exploitation status Not known exploited Fix Affected product J JetEngine Published 05/17/2024 Severity High CVE-2023-37866WordPress JetFormBuilder plugin <= 3.0.8 - Authenticated Privilege Escalation vulnerability Exploitation status Not known exploited Fix Affected product J JetFormBuilder Published 05/17/2024 Severity High CVE-2023-48763WordPress JetFormBuilder plugin <= 3.1.4 - Content Injection vulnerability Exploitation status Not known exploited Fix Affected product J JetFormBuilder Published 04/24/2024 Severity Medium CVE-2024-2138JetWidgets For Elementor <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box Widget Exploitation status Not known exploited Fix Affected product J JetWidgets For Elementor Published 04/09/2024 Severity Medium CVE-2024-2507JetWidgets For Elementor <= 1.0.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Button URL Exploitation status Not known exploited Fix Affected product J JetWidgets For Elementor Published 04/09/2024 Severity Medium CVE-2023-39157WordPress JetElements For Elementor Plugin <= 2.6.10 is vulnerable to Remote Code Execution (RCE) Exploitation status Not confirmed Fix Affected product J JetElements For Elementor Published 12/31/2023 Severity Critical CVE-2023-48762WordPress JetElements For Elementor Plugin <= 2.6.13 is vulnerable to Cross Site Request Forgery (CSRF) Exploitation status Not known exploited Fix Affected product J JetElements For Elementor Published 12/18/2023 Severity Medium CVE-2023-48756WordPress JetBlocks For Elementor Plugin <= 1.3.8 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not confirmed Fix Affected product J JetBlocks For Elementor Published 12/14/2023 Severity High CVE-2023-33212WordPress JetFormBuilder Plugin <= 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF) Exploitation status Not known exploited Fix Affected product J JetFormBuilder — Dynamic Blocks Form Builder Published 05/28/2023 Severity Medium CVE-2023-1406JetEngine < 3.1.3.1 - Author+ Remote Code Execution Exploitation status Public exploit Fix Affected product J JetEngine Published 04/10/2023 Severity High 
