Jetimpex Inc. JetEngine vulnerabilities

Latest Jetimpex Inc. JetEngine CVEs

Newest publication first

1. CVE-2026-54189 WordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerability

   Published 2026-06-17

   High·CVSS 7.1 EPSS 0.14%

   Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions.

2. CVE-2026-54188 WordPress JetEngine plugin <= 3.8.10 - Cross Site Scripting (XSS) vulnerability

   Published 2026-06-17

   High·CVSS 7.1 EPSS 0.14%

   Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions.

3. CVE-2026-54187 WordPress JetEngine plugin <= 3.8.10.1 - SQL Injection vulnerability

   Published 2026-06-17

   Critical·CVSS 9.3 EPSS 0.28%

   Unauthenticated SQL Injection in JetEngine <= 3.8.10.1 versions.

4. CVE-2026-52706 WordPress JetEngine plugin <= 3.8.10 - PHP Object Injection vulnerability

   Published 2026-06-17

   Critical·CVSS 9.8 EPSS 0.47%

   Unauthenticated PHP Object Injection in JetEngine <= 3.8.10 versions.

5. CVE-2026-49084 WordPress JetEngine plugin < 3.8.9.1 - SQL Injection vulnerability

   Published 2026-06-17

   Critical·CVSS 9.3 EPSS 0.28%

   Unauthenticated SQL Injection in JetEngine < 3.8.9.1 versions.

6. CVE-2026-49075 WordPress JetEngine plugin <= 3.8.9.1 - PHP Object Injection vulnerability

   Published 2026-06-17

   Critical·CVSS 9.8 EPSS 0.38%

   Contributor PHP Object Injection in JetEngine <= 3.8.9.1 versions.

7. CVE-2026-49074 WordPress JetEngine plugin <= 3.8.9.1 - Cross Site Scripting (XSS) vulnerability

   Published 2026-06-17

   High·CVSS 7.1 EPSS 0.18%

   Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.9.1 versions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.