Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2024-08-16	CVE-2024-7144	Cross-site Scripting vulnerability in Crocoblock Jetelements The JetElements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' and 'slide_id' parameters in all versions up to, and including, 2.6.20 due to insufficient input sanitization and output escaping. network low complexity crocoblock CWE-79	5.4
2024-06-19	CVE-2023-48761	Missing Authorization vulnerability in Crocoblock Jetelements Missing Authorization vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor: from n/a through 2.6.13. network low complexity crocoblock CWE-862	6.3