Vulnerabilities > Crocoblock > Jetelements > High

DATE CVE VULNERABILITY TITLE RISK
2024-08-16 CVE-2024-7145 Path Traversal vulnerability in Crocoblock Jetelements
The JetElements plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.6.20 via the 'progress_type' parameter.
network
low complexity
crocoblock CWE-22
8.8
2024-06-19 CVE-2023-48759 Missing Authorization vulnerability in Crocoblock Jetelements
Missing Authorization vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor: from n/a through 2.6.13.
network
low complexity
crocoblock CWE-862
7.5
2023-12-31 CVE-2023-39157 Code Injection vulnerability in Crocoblock Jetelements
Improper Control of Generation of Code ('Code Injection') vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor: from n/a through 2.6.10.
network
low complexity
crocoblock CWE-94
8.8