JetBlog

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   JetBlog

Information

Software Type Plugin
Software Slug jet-blog
Software Status Active
Software Author Crocoblock
Software Website crocoblock.com
Software Record Last Updated June 16, 2025

9 Vulnerabilities

Submit a Vulnerability
JetBlog <= 2.4.8 - Unauthenticated Information Exposure
5.3
CVE-2026-52696
Jun 10, 2026
Researcher: Austin Ginder
JetBlog <= 2.4.7 - Missing Authorization
4.3
CVE-2025-68503
Dec 30, 2025
Researcher: Bonds
JetBlog <= 2.4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-49932
Aug 3, 2025
Researcher: stealthcopter
JetBlog <= 2.4.4 - Reflected Cross-Site Scripting
6.1
CVE-2025-49933
Jul 17, 2025
Researcher: stealthcopter
JetBlog <= 2.4.3 - Missing Authorization
5.3
CVE-2025-26958
Apr 15, 2025
Researcher: stealthcopter
JetBlog <= 2.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-26744
Apr 11, 2025
Researcher: stealthcopter
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization
6.3
CVE-2023-48761
Nov 28, 2023
Researcher: Rafie Muhammad
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action
7.3
CVE-2023-48760
Nov 28, 2023
Researcher: Rafie Muhammad
Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery
4.3
CVE-2023-48762
Nov 28, 2023
Researcher: Rafie Muhammad
Title Status CVE ID CVSS Researchers Date
JetBlog <= 2.4.8 - Unauthenticated Information Exposure Patched CVE-2026-52696 5.3 Austin Ginder June 10, 2026
JetBlog <= 2.4.7 - Missing Authorization Patched CVE-2025-68503 4.3 Bonds December 30, 2025
JetBlog <= 2.4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-49932 6.4 stealthcopter August 3, 2025
JetBlog <= 2.4.4 - Reflected Cross-Site Scripting Patched CVE-2025-49933 6.1 stealthcopter July 17, 2025
JetBlog <= 2.4.3 - Missing Authorization Patched CVE-2025-26958 5.3 stealthcopter April 15, 2025
JetBlog <= 2.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-26744 6.4 stealthcopter April 11, 2025
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization Patched CVE-2023-48761 6.3 Rafie Muhammad November 28, 2023
Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action Patched CVE-2023-48760 7.3 Rafie Muhammad November 28, 2023
Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery Patched CVE-2023-48762 4.3 Rafie Muhammad November 28, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation