WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
jet-engine
Published
2026-03-23
Title
JetEngine < 3.8.6.2 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' Parameter
Slug
jet-engine
Published
2026-04-13
Title
JetEngine < 3.8.6.2 - Unauthenticated SQL Injection via '_cct_search' Parameter
Slug
jet-engine
Published
2026-04-30
Title
JetEngine < 3.8.8.2 - Unauthenticated SQL Injection
Slug
jet-engine
Published
2026-02-14
Title
JetEngine < 3.8.4.1 - Authenticated (Contributor+) PHP Object Injection
Slug
jet-engine
Published
2026-06-12
Title
JetEngine < 3.8.10.1 - Unauthenticated PHP Object Injection
Slug
jet-engine
Published
2026-06-08
Title
JetEngine < 3.8.10 - Unauthenticated Stored Cross-Site Scripting
Slug
jet-engine
Published
2026-06-08
Title
JetEngine < 3.8.10 - Unauthenticated SQL Injection
Slug
jet-engine
Published
2026-06-08
Title
JetEngine < 3.8.9.1 - Unauthenticated SQL Injection
Slug
jet-engine
Published
2026-06-08
Title
JetEngine < 3.8.10 - Authenticated (Contributor+) PHP Object Injection
Slug
jet-engine
Published
2026-06-16
Title
JetEngine < 3.8.10.2 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint
Slug
jet-engine
Published
2026-06-16
Title
JetEngine < 3.8.10.1 - Unauthenticated Stored Cross-Site Scripting
Slug
jet-engine
Published
2026-06-15
Title
JetEngine < 3.8.10.2 - Unauthenticated SQL Injection
Slug
jet-engine
Published
2026-06-16
Title
JetEngine < 3.8.10.1 - Unauthenticated Stored Cross-Site Scripting
Slug
jet-engine
Published
2026-06-25
Title
JetEngine < 3.8.11 - Unauthenticated SQL Injection
Slug
jet-engine
Published
2026-07-22
Title
JetEngine < 3.8.12 - Authenticated (Contributor+) Sever-Side Request Forgery
Slug
jet-engine
Published
2026-07-20
Title
JetEngine < 3.8.12 - Contributor+ Stored XSS via jet_engine Shortcode
Slug
jet-engine
Published
2026-08-03
Title
JetEngine < 3.8.13.2 - Unauthenticated Stored Cross-Site Scripting
Slug
jet-engine
Published
2026-08-19
Title
JetEngine < 3.8.14.2 - Unauthenticated Stored Cross-Site Scripting
Slug
jet-engine
Published
2026-08-19
Title
JetEngine < 3.8.14.1 - Unauthenticated Remote Code Execution
Slug
jet-engine
Published
2026-08-05
Title
JetEngine < 3.8.13.1 - Unauthenticated Stored XSS via Form File Upload (SVG)
Slug
jet-engine
Published
2026-08-27
Title
JetEngine < 3.8.14.3 - Unauthenticated Stored Cross-Site Scripting
Slug
jet-engine
Published
2026-08-17
Title
JetEngine < 3.8.14 - Author+ Stored XSS via SVG Upload
Slug
jet-engine
Published
2026-09-24
Title
JetEngine < 3.8.15 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
jet-engine
Published
2026-09-24
Title
JetEngine < 3.8.15 - Unauthenticated Stored Cross-Site Scripting
Slug
jet-engine
Published
2026-09-30
Title
JetEngine < 3.8.15.4 - Unauthenticated Stored Cross-Site Scripting