Known vulnerabilities in the JetEngine plugin

19 security advisories have been published for the JetEngine plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.

JetEngine - Cross-Site Scripting (XSS) (CVE-2026-66581) HIGH 2026-08-20
JetEngine - Remote Code Execution (CVE-2026-66613) CRITICAL 2026-08-19
Jetengine - Cross-Site Scripting (XSS) (CVE-2026-18202) MEDIUM 2026-08-19
Jetengine - Cross-Site Scripting (XSS) (CVE-2026-17019) MEDIUM 2026-08-10
JetEngine - Cross-Site Scripting (XSS) (CVE-2026-28082) HIGH 2026-08-06
Jetengine - Cross-Site Scripting (XSS) (CVE-2026-14864) MEDIUM 2026-08-02
JetEngine - SQL Injection (CVE-2026-56068) CRITICAL 2026-06-26
JetEngine - SQL Injection (CVE-2026-54187) CRITICAL 2026-06-17
JetEngine - Cross-Site Scripting (XSS) (CVE-2026-54189) HIGH 2026-06-17
JetEngine - Cross-Site Scripting (XSS) (CVE-2026-54188) HIGH 2026-06-17
JetEngine - PHP Object Injection (CVE-2026-52706) CRITICAL 2026-06-17
JetEngine - PHP Object Injection (CVE-2026-49075) CRITICAL 2026-06-17
JetEngine - SQL Injection (CVE-2026-49076) CRITICAL 2026-06-17
JetEngine - Cross-Site Scripting (XSS) (CVE-2026-49074) HIGH 2026-06-17
Jetengine - SQL Injection (CVE-2026-12360) HIGH 2026-06-17
Jetengine - SQL Injection (CVE-2026-4352) HIGH 2026-04-14
Jetengine - SQL Injection (CVE-2026-4662) HIGH 2026-03-24
Jetengine - Cross-Site Scripting (XSS) (CVE-2025-0369) MEDIUM 2025-01-18
Jetengine - Remote Code Execution (CVE-2023-1406) HIGH 2023-04-10

Browse the full threat database

WordPress security that blocks attacks before they land.

sales@hackhalt.com

© Hack Halt Inc. All rights reserved.