CVE-2026-12360 | Crocoblock JetEngine Plugin up to 3.8.10.1 on WordPress AJAX filtered_query sql injection

June 17, 2026 Yanac

A vulnerability was found in Crocoblock JetEngine Plugin up to 3.8.10.1 on WordPress. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the component AJAX Handler. This manipulation of the argument filtered_query causes sql injection.

This vulnerability appears as CVE-2026-12360. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More