Jetimpex Inc. vulnerabilities

Products

• JetEngine 7
• JetBlog 1
• JetSearch 1
• JetSmartFilters 1
• tm woocommerce compare wishlist 1

Latest Jetimpex Inc. CVEs

Newest publication first

1. CVE-2026-54189 WordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerability

   Published 2026-06-17

   High·CVSS 7.1 EPSS 0.14%

   Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions.

2. CVE-2026-54188 WordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerability

   Published 2026-06-17

   High·CVSS 7.1 EPSS 0.14%

   Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions.

3. CVE-2026-54187 WordPress JetEngine plugin <= 3.8.10.1 - SQL Injection vulnerability

   Published 2026-06-17

   Critical·CVSS 9.3 EPSS 0.28%

   Unauthenticated SQL Injection in JetEngine <= 3.8.10.1 versions.

4. CVE-2026-52706 WordPress JetEngine plugin <= 3.8.10 - PHP Object Injection vulnerability

   Published 2026-06-17

   Critical·CVSS 9.8 EPSS 0.47%

   Unauthenticated PHP Object Injection in JetEngine <= 3.8.10 versions.

5. CVE-2026-52696 WordPress JetBlog plugin <= 2.4.8 - Sensitive Data Exposure vulnerability

   Published 2026-06-17

   High·CVSS 7.5 EPSS 0.24%

   Unauthenticated Sensitive Data Exposure in JetBlog <= 2.4.8 versions.

6. CVE-2026-49084 WordPress JetEngine plugin < 3.8.9.1 - SQL Injection vulnerability

   Published 2026-06-17

   Critical·CVSS 9.3 EPSS 0.28%

   Unauthenticated SQL Injection in JetEngine < 3.8.9.1 versions.

7. CVE-2026-49079 WordPress JetSearch plugin <= 3.5.17 - SQL Injection vulnerability

   Published 2026-06-17

   Critical·CVSS 9.3 EPSS 0.35%

   Unauthenticated SQL Injection in JetSearch <= 3.5.17 versions.

8. CVE-2026-49075 WordPress JetEngine plugin <= 3.8.9.1 - PHP Object Injection vulnerability

   Published 2026-06-17

   Critical·CVSS 9.8 EPSS 0.38%

   Contributor PHP Object Injection in JetEngine <= 3.8.9.1 versions.

9. CVE-2026-49074 WordPress JetEngine plugin <= 3.8.9.1 - Cross Site Scripting (XSS) vulnerability

   Published 2026-06-17

   High·CVSS 7.1 EPSS 0.18%

   Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.9.1 versions.

10. CVE-2026-48875 WordPress JetSmartFilters plugin <= 3.8.1 - SQL Injection vulnerability

    Published 2026-06-17

    Critical·CVSS 9.3 EPSS 0.42%

    Unauthenticated SQL Injection in JetSmartFilters <= 3.8.1 versions.

11. CVE-2023-5230 TM WooCommerce Compare & Wishlist <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    Published 2023-09-28

    Medium·CVSS 5.4 EPSS 0.38%

    The TM WooCommerce Compare & Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tm_woo_wishlist_table' shortcode in versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.