How many Crocoblock jetwidgets for elementor CVEs are in CISA KEV?

None of Crocoblock jetwidgets for elementor's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Crocoblock jetwidgets for elementor vulnerabilities?

Yes — 1 of Crocoblock jetwidgets for elementor's CVEs have a known public exploit.

Which versions of Crocoblock jetwidgets for elementor are affected?

13 distinct Crocoblock jetwidgets for elementor versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Crocoblock jetwidgets for elementor CVEs?

Crocoblock jetwidgets for elementor's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-352 (Cross-Site Request Forgery (CSRF)).

What is the average severity of Crocoblock jetwidgets for elementor CVEs?

The average CVSS base score across Crocoblock jetwidgets for elementor's scored CVEs is 6.2.

RadicalNotion.AI

Log in Create an account

Crocoblock

8 CVEs

Crocoblock jetwidgets for elementor Vulnerabilities

Name: Crocoblock jetwidgets for elementor vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for jetwidgets for elementor by Crocoblock.

8

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

6.2

Avg CVSS

2021–2024

Last updated November 12, 2024

Overview

Crocoblock jetwidgets for elementor has 8 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 6.2.

Severity and exploitation

How the CVSS severity of Crocoblock jetwidgets for elementor's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High0

Medium8

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Crocoblock jetwidgets for elementor's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of Crocoblock jetwidgets for elementor's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Crocoblock jetwidgets for elementor version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.0.161 CVE
< 1.0.171 CVE
< 1.0.181 CVE
< 1.0.191 CVE
< 1.0.91 CVE
<= 1.0.121 CVE
<= 1.0.131 CVE
<= 1.1.71 CVE

Fixed in

1.0.161 CVE
1.0.171 CVE
1.0.181 CVE
1.0.191 CVE
1.0.91 CVE

Find a version

8 CVEs

Sort

JetWidgets For Elementor <= 1.0.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-10323
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.3% (22th pct)2024-11-12
WordPress JetWidgets for Elementor and WooCommerce plugin <= 1.1.7 - Contributor+ Limited Local File Inclusion vulnerability
CVE-2024-38772
Patch
CWE-22
Medium · CVSS 6.5
EPSS 0.5% (41th pct)2024-08-01
JetWidgets For Elementor <= 1.0.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_type and id Parameters
CVE-2024-4626
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.3% (24th pct)2024-06-20
JetWidgets For Elementor <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box Widget
CVE-2024-2138
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.4% (35th pct)2024-04-09
JetWidgets For Elementor <= 1.0.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Button URL
CVE-2024-2507
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.3% (26th pct)2024-04-09
Medium vulnerability · 2023-02-13
CVE-2023-0034
Public exploit
Patch
Medium · CVSS 5.4
EPSS 0.5% (40th pct)2023-02-13
JetWidgets for Elementor <= 1.0.12 - Cross-Site Request Forgery to Settings Update
CVE-2023-0086CWE-352
Medium · CVSS 6.5
EPSS 0.3% (27th pct)2023-01-05
Medium vulnerability · 2021-05-05
CVE-2021-24268
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.6% (47th pct)2021-05-05

Common weakness types

The CWE weakness categories most often found in Crocoblock jetwidgets for elementor CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Crocoblock jetwidgets for elementor CVEs were published each year.

2021

1

2023

2

2024

5

Other Crocoblock products

Browse vulnerabilities for other products by Crocoblock.

JetEngine23 CVEs JetElements For Elementor15 CVEs JetBlocks For Elementor9 CVEs jetelements8 CVEs JetSearch7 CVEs JetTabs7 CVEs JetBlog6 CVEs JetFormBuilder6 CVEs

All Crocoblock vulnerabilities

Frequently asked questions

Common questions about Crocoblock jetwidgets for elementor vulnerabilities.

How many CVEs does Crocoblock jetwidgets for elementor have?: Crocoblock jetwidgets for elementor has 8 published CVE records since 2021.
How many Crocoblock jetwidgets for elementor CVEs are in CISA KEV?: None of Crocoblock jetwidgets for elementor's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Crocoblock jetwidgets for elementor vulnerabilities?: Yes — 1 of Crocoblock jetwidgets for elementor's CVEs have a known public exploit.
Which versions of Crocoblock jetwidgets for elementor are affected?: 13 distinct Crocoblock jetwidgets for elementor versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Crocoblock jetwidgets for elementor CVEs?: Crocoblock jetwidgets for elementor's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-352 (Cross-Site Request Forgery (CSRF)).
What is the average severity of Crocoblock jetwidgets for elementor CVEs?: The average CVSS base score across Crocoblock jetwidgets for elementor's scored CVEs is 6.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Crocoblock jetwidgets for elementor vulnerabilities

Get an alert for each new Crocoblock jetwidgets for elementor CVE, with AI-written analysis and remediation steps.

Create an account See pricing