JetSearch

JetSearch has 11 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 11 are fixed as of October 2026. Their average CVSS score is 6.3, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 2 high. 2025 was the busiest year with 5 disclosures.

The most common weakness is Cross-Site Scripting, behind 6 of the records (55%). Other recurring categories include SQL Injection, Cross-Site Request Forgery (CSRF).

Every one of the 11 issues recorded for JetSearch has a vendor fix available, so running the current release closes all known holes.

5 independent researchers contributed these findings, most of them (5) reported by stealthcopter.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all JetSearch vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.5CVE-2026-49079

JetSearch <= 3.5.17 - Unauthenticated SQL Injection

Read the full analysis

Vulnerability Records

11 records


2026-09-17 11:54	JetSearch <= 3.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting JetSearch <= 3.6.3	`CVE-2026-66577`	6.4 Medium	nh4tvd	Yes
2026-08-01 00:00	JetSearch <= 3.6.1.2 - Unauthenticated Information Exposure JetSearch <= 3.6.1.2	`CVE-2026-61977`	5.3 Medium	Ananda Dhakal	Yes
2026-06-05 00:00	JetSearch <= 3.5.17 - Unauthenticated SQL Injection JetSearch <= 3.5.17	`CVE-2026-49079`	7.5 High	Bonds	Yes
2025-12-30 00:00	JetSearch <= 3.5.16 - Authenticated (Contributor+) Stored Cross-Site Scripting JetSearch <= 3.5.16	`CVE-2025-68504`	6.4 Medium	Bonds	Yes
2025-07-18 00:00	JetSearch <= 3.5.10 - Reflected Cross-Site Scripting JetSearch <= 3.5.10	`CVE-2025-49930`	6.1 Medium	stealthcopter	Yes
2025-07-17 00:00	JetSearch <= 3.5.10 - Unauthenticated SQL Injection JetSearch <= 3.5.10	`CVE-2025-49931`	7.5 High	stealthcopter	Yes
2025-07-16 00:00	JetSearch <= 3.5.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting JetSearch <= 3.5.10.1	`CVE-2025-53996`	6.4 Medium	stealthcopter	Yes
2025-03-29 00:00	JetSearch <= 3.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting JetSearch <= 3.5.7	`CVE-2025-31043`	6.4 Medium	stealthcopter	Yes
2024-08-15 00:00	JetSearch <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting JetSearch <= 3.5.2	`CVE-2024-7136`	6.4 Medium	stealthcopter	Yes
2023-11-28 00:00	Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery JetSearch <= 3.1.2	`CVE-2023-48762`	4.3 Medium	Rafie Muhammad	Yes

Showing 1–10 of 11 reports