Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Vendors
Crocoblock
Jetelements For Elementor

Crocoblock JetElements For Elementor Vulnerabilities: CVEs, CISA KEV & Security Advisories

15 CVEs

Crocoblock JetElements For Elementor Vulnerabilities

CVE security advisories and vulnerability history for JetElements For Elementor by Crocoblock.

15

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

7.2

Avg CVSS

2023–2026

Last updated October 12, 2026

Overview

Crocoblock JetElements For Elementor has 15 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.

Severity and exploitation

How the CVSS severity of Crocoblock JetElements For Elementor's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High3

Medium10

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Crocoblock JetElements For Elementor's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of Crocoblock JetElements For Elementor's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Crocoblock JetElements For Elementor version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 2.6.134 CVEs
>= 2.6.13.14 CVEs
<= 2.7.4.12 CVEs
<= 2.7.72 CVEs
>= 2.7.4.22 CVEs
>= 2.7.7.12 CVEs
< 2.6.13.11 CVE
<= 2.6.101 CVE
<= 2.7.121 CVE
<= 2.7.12.21 CVE
<= 2.7.81 CVE
<= 2.7.91 CVE
<= 2.9.2.21 CVE
<= 2.9.2.31 CVE
>= 2.6.111 CVE
>= 2.7.12.11 CVE
>= 2.7.12.31 CVE
>= 2.7.8.11 CVE
>= 2.7.9.11 CVE
>= 2.9.2.31 CVE
>= 2.9.2.41 CVE

Fixed in

2.6.13.14 CVEs
2.7.4.22 CVEs
2.7.7.12 CVEs
2.6.111 CVE
2.7.12.11 CVE
2.7.12.31 CVE
2.7.8.11 CVE
2.7.9.11 CVE
2.9.2.31 CVE
2.9.2.41 CVE

Find a version

15 CVEs

Sort

WordPress JetElements For Elementor plugin <= 2.9.2.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-107866
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.2% (5th pct)2026-10-12
WordPress JetElements For Elementor plugin <= 2.9.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-105879
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.2% (6th pct)2026-10-06
WordPress JetElements For Elementor plugin <= 2.7.12.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24958
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.2% (8th pct)2026-02-03
WordPress JetElements For Elementor plugin <= 2.7.12 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64355
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.2% (5th pct)2025-12-18
WordPress JetElements For Elementor plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49939
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.2% (12th pct)2025-10-22
WordPress JetElements For Elementor <= 2.7.7 - Sensitive Data Exposure Vulnerability
CVE-2025-53983
Patch
CWE-201
Medium · CVSS 6.5
EPSS 0.4% (27th pct)2025-08-20
WordPress JetElements For Elementor Plugin <= 2.7.9 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-55714
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.2% (6th pct)2025-08-14
WordPress JetElements For Elementor plugin <= 2.7.7 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-53982
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.2% (13th pct)2025-07-16
WordPress JetElements For Elementor plugin <= 2.7.4.1 - Broken Access Control Vulnerability
CVE-2025-39447
Patch
CWE-862
High · CVSS 7.5
EPSS 0.4% (28th pct)2025-05-19
WordPress JetElements For Elementor plugin <= 2.7.4.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-39448
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.2% (11th pct)2025-05-19
WordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Arbitrary Attachment Download vulnerability
CVE-2023-48759
Patch
CWE-862
High · CVSS 7.5
EPSS 0.4% (33th pct)2024-06-19
WordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Broken Access Control vulnerability
CVE-2023-48760
Public exploit
Patch
CWE-862
Critical · CVSS 9.8
EPSS 0.4% (37th pct)2024-06-19
WordPress JetElements For Elementor plugin <= 2.6.13 - Broken Access Control vulnerability
CVE-2023-48761
Patch
CWE-862
Medium · CVSS 6.3
EPSS 0.3% (18th pct)2024-06-19
WordPress JetElements For Elementor Plugin <= 2.6.10 is vulnerable to Remote Code Execution (RCE)
CVE-2023-39157
Patch
CWE-94
Critical · CVSS 9.0
EPSS 0.7% (53th pct)2023-12-31
WordPress JetElements For Elementor Plugin <= 2.6.13 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-48762
Patch
CWE-352
High · CVSS 8.8
EPSS 0.2% (14th pct)2023-12-18

Common weakness types

The CWE weakness categories most often found in Crocoblock JetElements For Elementor CVEs. Follow any weakness for its full explanation.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8 CVEs
CWE-862Missing Authorization4 CVEs
CWE-201Insertion of Sensitive Information Into Sent Data1 CVE
CWE-352Cross-Site Request Forgery (CSRF)1 CVE
CWE-94Improper Control of Generation of Code ('Code Injection')1 CVE

Disclosure activity by year

How many Crocoblock JetElements For Elementor CVEs were published each year.

2023

2

2024

3

2025

7

2026

3

Other Crocoblock products

Browse vulnerabilities for other products by Crocoblock.

JetEngine23 CVEs JetBlocks For Elementor9 CVEs jetelements8 CVEs jetwidgets for elementor8 CVEs JetSearch7 CVEs JetTabs7 CVEs JetBlog6 CVEs JetFormBuilder6 CVEs

All Crocoblock vulnerabilities

Frequently asked questions

Common questions about Crocoblock JetElements For Elementor vulnerabilities.

How many CVEs does Crocoblock JetElements For Elementor have?: Crocoblock JetElements For Elementor has 15 published CVE records since 2023.
How many Crocoblock JetElements For Elementor CVEs are in CISA KEV?: None of Crocoblock JetElements For Elementor's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Crocoblock JetElements For Elementor vulnerabilities?: Yes — 1 of Crocoblock JetElements For Elementor's CVEs have a known public exploit.
Which versions of Crocoblock JetElements For Elementor are affected?: 31 distinct Crocoblock JetElements For Elementor versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Crocoblock JetElements For Elementor CVEs?: Crocoblock JetElements For Elementor's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-201 (Insertion of Sensitive Information Into Sent Data), CWE-352 (Cross-Site Request Forgery (CSRF)).
How many critical Crocoblock JetElements For Elementor vulnerabilities are there?: Crocoblock JetElements For Elementor has 2 critical and 3 high-severity CVEs.
What is the average severity of Crocoblock JetElements For Elementor CVEs?: The average CVSS base score across Crocoblock JetElements For Elementor's scored CVEs is 7.2.

References

All Crocoblock vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Crocoblock JetElements For Elementor vulnerabilities

Get an alert for each new Crocoblock JetElements For Elementor CVE, with AI-written analysis and remediation steps.

Create an account See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References