CVE-2025-68498
- EPSS 0.21%
- Veröffentlicht 29.12.2025 23:13:35
- Zuletzt bearbeitet 23.04.2026 15:35:55
Missing Authorization vulnerability in Crocoblock JetTabs jet-tabs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetTabs: from n/a through <= 2.2.12.
CVE-2025-68499
- EPSS 0.13%
- Veröffentlicht 29.12.2025 23:10:45
- Zuletzt bearbeitet 23.04.2026 15:35:55
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetTabs jet-tabs allows DOM-Based XSS.This issue affects JetTabs: from n/a through <= 2.2.12.
CVE-2025-53985
- EPSS 0.32%
- Veröffentlicht 20.08.2025 08:03:08
- Zuletzt bearbeitet 29.04.2026 10:16:50
Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetTabs jet-tabs allows Retrieve Embedded Sensitive Data.This issue affects JetTabs: from n/a through <= 2.2.9.
CVE-2025-54687
- EPSS 0.2%
- Veröffentlicht 14.08.2025 10:34:48
- Zuletzt bearbeitet 23.04.2026 15:32:49
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetTabs jet-tabs allows DOM-Based XSS.This issue affects JetTabs: from n/a through <= 2.2.9.1.
CVE-2025-53984
- EPSS 0.2%
- Veröffentlicht 16.07.2025 10:36:10
- Zuletzt bearbeitet 23.04.2026 15:32:39
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetTabs jet-tabs allows Stored XSS.This issue affects JetTabs: from n/a through <= 2.2.9.
CVE-2025-39450
- EPSS 0.17%
- Veröffentlicht 19.05.2025 17:32:19
- Zuletzt bearbeitet 23.04.2026 15:29:35
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetTabs jet-tabs allows DOM-Based XSS.This issue affects JetTabs: from n/a through <= 2.2.7.
CVE-2024-7146
- EPSS 0.96%
- Veröffentlicht 16.08.2024 11:15:04
- Zuletzt bearbeitet 15.04.2026 00:35:42
The JetTabs for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.3 via the 'switcher_preset' parameter. This makes it possible for authenticated attackers, with Contributor-level access an...