Approved changes feed: RSS · Atom

cpe:2.3:a:crocoblock:jetsearch:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCrocoblock (ef7ce6af-89c8-5e74-9d86-961d95db36f9)
ProductJetsearch (1a67b327-5202-58ee-982d-a1d3b2d53ff7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-61977 vulnerable 2026-07-29 01:06:18.956035 WordPress JetSearch plugin <= 3.6.1.2 - Sensitive Data Exposure vulnerability
MEDIUM (5.3)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetSearch jet-search allows Retrieve Embedded Sensitive Data.This issue affects JetSearch: from n/a through <= 3.6.1.2.
Published: 2026-07-13T08:41:25.897Z
Updated: 2026-07-13T14:30:13.175Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-68504 vulnerable 2026-06-08 07:41:21.318627 WordPress JetSearch plugin <= 3.5.16 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSearch jet-search allows DOM-Based XSS.This issue affects JetSearch: from n/a through <= 3.5.16.
Published: 2025-12-29T21:14:40.576Z
Updated: 2026-04-28T16:14:29.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53996 vulnerable 2026-06-08 07:31:16.096935 WordPress JetSearch plugin <= 3.5.10.1 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSearch jet-search allows Stored XSS.This issue affects JetSearch: from n/a through <= 3.5.10.1.
Published: 2025-07-16T10:36:39.427Z
Updated: 2026-04-28T16:13:27.982Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49931 vulnerable 2026-06-08 07:29:15.121497 WordPress JetSearch plugin <= 3.5.10 - SQL Injection vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetSearch jet-search allows Blind SQL Injection.This issue affects JetSearch: from n/a through <= 3.5.10.
Published: 2025-10-22T14:32:15.259Z
Updated: 2026-04-28T16:13:08.251Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49930 vulnerable 2026-06-08 07:29:15.121040 WordPress JetSearch plugin <= 3.5.10 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSearch jet-search allows Reflected XSS.This issue affects JetSearch: from n/a through <= 3.5.10.
Published: 2025-10-22T14:32:15.035Z
Updated: 2026-04-28T20:25:22.183Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31043 vulnerable 2026-06-08 07:17:02.276582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7136 vulnerable 2026-06-08 06:58:21.350370 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.