Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:jetengine:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Jetengine (f06a32dd-6cae-5d52-9d77-65b637a482c1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-14864 |
vulnerable | 2026-09-16 04:33:12.497390 |
JetEngine < 3.8.12 - Contributor+ Stored XSS via jet_engine Shortcode
The JetEngine WordPress plugin before 3.8.12 does not escape a post meta value before outputting it through one of its shortcodes, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the context of higher-privileged users such as administrators.
Published: 2026-08-02T06:00:08.137Z
Updated: 2026-08-03T17:40:16.653Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-17019 |
vulnerable | 2026-09-16 04:33:03.496799 |
JetEngine < 3.8.13.1 - Unauthenticated Stored XSS via Form File Upload (SVG)
The JetEngine WordPress plugin before 3.8.13.1 does not sanitise uploaded SVG files before storing and serving them, and does not adequately restrict who can upload them, allowing unauthenticated attackers to upload a file containing malicious JavaScript that executes in the browser of any user who opens it (Stored Cross-Site Scripting).
Published: 2026-08-10T06:00:11.847Z
Updated: 2026-08-10T19:20:29.500Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1406 |
vulnerable | 2026-06-08 05:52:35.785554 |
JetEngine < 3.1.3.1 - Author+ Remote Code Execution
The JetEngine WordPress plugin before 3.1.3.1 includes uploaded files without adequately ensuring that they are not executable, leading to a remote code execution vulnerability.
Published: 2023-04-10T13:17:54.722Z
Updated: 2025-02-11T21:32:31.166Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.