CrocoBlock vulnerabilities
We track 46 vulnerabilities in CrocoBlock products across 21 products. 46 are rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.
Latest CrocoBlock vulnerabilities
- 7.2 High severity
JetFormBuilder — Dynamic Blocks Form Builder: Improper Privilege Management
The JetFormBuilder plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.3.4.1. This is due to improper restriction on user meta fields. This makes it possible for authenticated attackers, with administrator-level a
- 7.7 High severity
JetThemeCore: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock JetThemeCore jet-theme-core.This issue affects JetThemeCore: from n/a through < 2.2.1.
- 7.2 High severity
JetFormBuilder: Improper Privilege Management
Improper Privilege Management vulnerability in Crocoblock JetFormBuilder allows Privilege Escalation.This issue affects JetFormBuilder: from n/a through 3.0.8.
- 8.8 High severity
JetElements For Elementor: Improper Control of Generation of Code
Improper Control of Generation of Code ('Code Injection') vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor: from n/a through 2.6.10.
- 8.8 High severity
JetElements For Elementor: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor: from n/a through 2.6.13.
- 8.8 High severity
JetEngine: Unrestricted Upload of File with Dangerous Type
The JetEngine WordPress plugin before 3.1.3.1 includes uploaded files without adequately ensuring that they are not executable, leading to a remote code execution vulnerability.