SQL Injection

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. WordPress JetSearch plugin <= 3.5.10 - SQL Injection vulnerabilityCVE-2025-49931Crocoblock · CVSS 9.3 · 0.5% likely

   CWE-89

2. JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' ParameterCVE-2026-4352Crocoblock · CVSS 7.5 · 0.4% likely

   CWE-89

3. WordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerabilityCVE-2026-49076Crocoblock · CVSS 9.3 · 0.4% likely

   CWE-89

4. WordPress JetEngine plugin <= 3.8.8.1 - SQL Injection vulnerabilityCVE-2026-42774Crocoblock · CVSS 9.3 · 0.4% likely

   CWE-89

5. JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' ParameterCVE-2026-4662Crocoblock · CVSS 7.5 · 0.3% likely

   CWE-89

6. JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX EndpointCVE-2026-12360Crocoblock · CVSS 7.5 · 0.3% likely

   CWE-89

7. JetBooking <= 4.0.3 - Unauthenticated SQL Injection via 'check_in_date' ParameterCVE-2026-3496Crocoblock · CVSS 7.5 · 0.3% likely

   CWE-89

8. WordPress JetEngine plugin <= 3.9.0.1 - SQL Injection vulnerabilityCVE-2026-39736Crocoblock · CVSS 8.5 · 0.3% likely

   CWE-89

9. WordPress JetEngine plugin <= 3.9.0 - SQL Injection vulnerabilityCVE-2026-115608Crocoblock · CVSS 8.5 · 0.3% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.