JetBlog

JetBlog has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 9 are fixed as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 7.3 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 5 disclosures.

The most common weakness is Missing Authorization, behind 4 of the records (44%). Other recurring categories include Cross-Site Scripting, Cross-Site Request Forgery (CSRF).

Every one of the 9 issues recorded for JetBlog has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, most of them (4) reported by stealthcopter.

Strategic Overview

Avg CVSSMedium

5.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all JetBlog vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.3CVE-2023-48760

Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action

Read the full analysis

Vulnerability Records

9 records


2026-06-10 00:00	JetBlog <= 2.4.8 - Unauthenticated Information Exposure JetBlog <= 2.4.8	`CVE-2026-52696`	5.3 Medium	Austin Ginder	Yes
2025-12-30 00:00	JetBlog <= 2.4.7 - Missing Authorization JetBlog <= 2.4.7	`CVE-2025-68503`	4.3 Medium	Bonds	Yes
2025-08-03 00:00	JetBlog <= 2.4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting JetBlog <= 2.4.4.1	`CVE-2025-49932`	6.4 Medium	stealthcopter	Yes
2025-07-17 00:00	JetBlog <= 2.4.4 - Reflected Cross-Site Scripting JetBlog <= 2.4.4	`CVE-2025-49933`	6.1 Medium	stealthcopter	Yes
2025-04-15 00:00	JetBlog <= 2.4.3 - Missing Authorization JetBlog <= 2.4.3	`CVE-2025-26958`	5.3 Medium	stealthcopter	Yes
2025-04-11 00:00	JetBlog <= 2.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting JetBlog <= 2.4.3	`CVE-2025-26744`	6.4 Medium	stealthcopter	Yes
2023-11-28 00:00	Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery JetBlog <= 2.3.5	`CVE-2023-48762`	4.3 Medium	Rafie Muhammad	Yes
2023-11-28 00:00	Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action JetBlog <= 2.3.5	`CVE-2023-48760`	7.3 High	Rafie Muhammad	Yes
2023-11-28 00:00	Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization JetBlog <= 2.3.5	`CVE-2023-48761`	6.3 Medium	Rafie Muhammad	Yes

Showing 1–9 of 9 reports