Crocoblock JetEngine Code Injection Vulnerability Allowing Remote Code Execution
Vulnerability
A code injection vulnerability has been identified in the Crocoblock JetEngine WordPress plugin, specifically in versions through 3.7.0. This vulnerability arises from improper neutralization of special elements used in the template engine, allowing for remote code execution on the affected website.
Impact
Exploitation of this vulnerability allows for remote code execution on the target website, potentially leading to unauthorized access and control over the site.
Remediation
Users of the Crocoblock JetEngine WordPress plugin should update to version 3.7.1.1 or later. Patchstack users can enable auto-update for vulnerable plugins.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.