Known vulnerabilities in the Jet Engine plugin
22 security advisories have been published for the Jet Engine plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Jet Engine - Security Vulnerability (CVE-2026-97265) MEDIUM
- Jet Engine - Security Vulnerability (CVE-2026-97237) HIGH
- Jet Engine - Security Vulnerability (CVE-2026-97238) MEDIUM
- Jet Engine - Cross-Site Scripting (XSS) (CVE-2026-81760) HIGH
- Jet Engine - Server-Side Request Forgery (SSRF) (CVE-2026-65467) MEDIUM
- Jet Engine - SQL Injection (CVE-2026-49084) CRITICAL
- Jet Engine - SQL Injection (CVE-2026-49076) CRITICAL
- Jet Engine - SQL Injection (CVE-2026-12360) HIGH
- Jet Engine - SQL Injection (CVE-2026-42774) CRITICAL
- Jet Engine - SQL Injection (CVE-2026-4662) HIGH
- Jet Engine - PHP Object Injection (CVE-2026-32355) HIGH
- Jet Engine - Remote Code Execution (CVE-2026-28134) HIGH
- Jet Engine - Cross-Site Scripting (XSS) (CVE-2025-68495) HIGH
- Jet Engine - Cross-Site Scripting (XSS) (CVE-2025-67923) HIGH
- Jet Engine - Broken Access Control (CVE-2025-69333) MEDIUM
- Jet Engine - Cross-Site Scripting (XSS) (CVE-2025-49938) MEDIUM
- Jet Engine - Remote Code Execution (CVE-2025-53194) HIGH
- Jet Engine - Information Disclosure (CVE-2025-53196) MEDIUM
- Jet Engine - Cross-Site Scripting (XSS) (CVE-2025-53195) MEDIUM
- Jet Engine - Cross-Site Scripting (XSS) (CVE-2025-54688) MEDIUM
- Jet Engine - Cross-Site Scripting (XSS) (CVE-2025-26870) MEDIUM
- Jet Engine - Broken Access Control (CVE-2023-48758) HIGH