Jetengine (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-19. Vendor: Unknown.

CVEs of Jetengine

• CVE-2026-18202 - CVSS 6.8 (medium), 2026-08-19: The JetEngine WordPress plugin before 3.8.14 adds SVG to the site-wide list of allowed upload types without sanitising the file contents, allowing users with…
• CVE-2026-17019 - CVSS 6.1 (medium), 2026-08-10: The JetEngine WordPress plugin before 3.8.13.1 does not sanitise uploaded SVG files before storing and serving them, and does not adequately restrict who can…
• CVE-2026-14864 - CVSS 5.4 (medium), 2026-08-02: The JetEngine WordPress plugin before 3.8.12 does not escape a post meta value before outputting it through one of its shortcodes, allowing users with the…
• CVE-2023-1406 - CVSS 8.8 (high), 2023-04-10: The JetEngine WordPress plugin before 3.1.3.1 includes uploaded files without adequately ensuring that they are not executable, leading to a remote code…