Crocoblock Jetelements — known CVE vulnerabilities

Every CVE whose affected-product data names Crocoblock Jetelements, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2023-39157 — CVSS 9.0 (critical): Improper Control of Generation of Code ('Code Injection') vulnerability in Crocoblock JetElements For Elementor.This issue affects…
• CVE-2024-7145 — CVSS 8.8 (high): The JetElements plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.6.20 via the…
• CVE-2023-48760 — CVSS 8.2 (high): Missing Authorization vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor: from n/a through…
• CVE-2023-48759 — CVSS 7.5 (high): Missing Authorization vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor: from n/a through…
• CVE-2025-0371 — CVSS 6.4 (medium): The JetElements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including…
• CVE-2024-7144 — CVSS 6.4 (medium): The JetElements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' and 'slide_id' parameters in all versions up…
• CVE-2023-48761 — CVSS 6.3 (medium): Missing Authorization vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor: from n/a through…