C
Vendor security profile
Crocoblock
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical1
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS7.0
12-month vulnerability rate
0
0
0
0
0
0
0
1
0
1
0
7
CVE KEV
CVE severity distribution
9toplam CVE
Critical1 (11%)
High3 (33%)
Medium5 (56%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
9Unknown
Latest vulnerabilities
6.5
CVE-2026-107865
WordPress JetMenu plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability
C
Patch status unknownEPSS %0
6.5
CVE-2026-107866
WordPress JetElements For Elementor plugin <= 2.9.2.3 - Cross Site Scripting (XSS) vulnerability
C
Patch status unknownEPSS %0
6.5
CVE-2026-94667
WordPress JetReviews plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability
C
Patch status unknownEPSS %0
7.1
CVE-2026-94661
WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability
C
Patch status unknownEPSS %0
6.5
CVE-2026-62049
WordPress JetBlocks For Elementor plugin <= 1.5.2.1 - Cross Site Scripting (XSS) vulnerability
C
Patch status unknownEPSS %0
6.5
CVE-2026-105879
WordPress JetElements For Elementor plugin <= 2.9.2.2 - Cross Site Scripting (XSS) vulnerability
C
Patch status unknownEPSS %0
7.2
CVE-2026-93875
JetAppointment <= 2.5.2.1 - Unauthenticated Stored Cross-Site Scripting via 'friendlyTime' Parameter
C
Patch status unknownEPSS %0
6.5
CVE-2026-97265
WordPress JetEngine plugin <= 3.8.15.3 - Cross Site Scripting (XSS) vulnerability
CJ
Patch status unknownEPSS %0
5.5
CVE-2026-97238
WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability
CJ
Patch status unknownEPSS %0
7.1
CVE-2026-97237
WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability
CJ
Patch status unknownEPSS %0