JetBlocks for Elementor

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   JetBlocks for Elementor

Information

Software Type Plugin
Software Slug jet-blocks
Software Status Active
Software Author Crocoblock
Software Website crocoblock.com
Software Record Last Updated June 13, 2025

11 Vulnerabilities

Submit a Vulnerability
JetBlocks for Elementor <= 1.5.0 - Unauthenticated Information Exposure
5.3
CVE-2026-61976
Aug 1, 2026
Researcher: Ananda Dhakal
JetBlocks For Elementor <= 1.3.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-49934
Jul 17, 2025
Researcher: stealthcopter
JetBlocks For Elementor <= 1.3.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-53989
Jul 16, 2025
Researcher: stealthcopter
JetBlocks For Elementor <= 1.3.18 - Authenticated (Subscriber+) Information Disclsoure
4.3
CVE-2025-53988
Jul 16, 2025
Researcher: stealthcopter
JetBlocks For Elementor <= 1.3.16 - Missing Authorization
5.3
CVE-2025-39451
Apr 17, 2025
Researcher: stealthcopter
JetBlocks For Elementor <= 1.3.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-30987
Mar 29, 2025
Researcher: stealthcopter
JetBlocks <= 1.3.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-7147
Aug 15, 2024
Researcher: stealthcopter
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization
6.3
CVE-2023-48761
Nov 28, 2023
Researcher: Rafie Muhammad
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action
7.3
CVE-2023-48760
Nov 28, 2023
Researcher: Rafie Muhammad
Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery
4.3
CVE-2023-48762
Nov 28, 2023
Researcher: Rafie Muhammad
JetBlocks For Elementor <= 1.3.8 - Reflected Cross Site Scripting
6.1
CVE-2023-48756
Nov 28, 2023
Researcher: Rafie Muhammad
Title Status CVE ID CVSS Researchers Date
JetBlocks for Elementor <= 1.5.0 - Unauthenticated Information Exposure Patched CVE-2026-61976 5.3 Ananda Dhakal August 1, 2026
JetBlocks For Elementor <= 1.3.18 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-49934 6.4 stealthcopter July 17, 2025
JetBlocks For Elementor <= 1.3.19 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-53989 6.4 stealthcopter July 16, 2025
JetBlocks For Elementor <= 1.3.18 - Authenticated (Subscriber+) Information Disclsoure Patched CVE-2025-53988 4.3 stealthcopter July 16, 2025
JetBlocks For Elementor <= 1.3.16 - Missing Authorization Patched CVE-2025-39451 5.3 stealthcopter April 17, 2025
JetBlocks For Elementor <= 1.3.16 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-30987 6.4 stealthcopter March 29, 2025
JetBlocks <= 1.3.12 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-7147 6.4 stealthcopter August 15, 2024
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization Patched CVE-2023-48761 6.3 Rafie Muhammad November 28, 2023
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action Patched CVE-2023-48760 7.3 Rafie Muhammad November 28, 2023
Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery Patched CVE-2023-48762 4.3 Rafie Muhammad November 28, 2023
JetBlocks For Elementor <= 1.3.8 - Reflected Cross Site Scripting Patched CVE-2023-48756 6.1 Rafie Muhammad November 28, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation