JetSmartFilters

JetSmartFilters has 10 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 10 are fixed as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 3 high. 2026 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (40%). Other recurring categories include Missing Authorization, SQL Injection.

Every one of the 10 issues recorded for JetSmartFilters has a vendor fix available, so running the current release closes all known holes.

5 independent researchers contributed these findings, most of them (3) reported by Rafie Muhammad.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all JetSmartFilters vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.5CVE-2026-56067

JetSmartFilters <= 3.8.3 - Unauthenticated SQL Injection

Read the full analysis

Vulnerability Records

10 records


2026-10-26 10:36	JetSmartFilters <= 3.8.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting JetSmartFilters <= 3.8.6.1	`CVE-2026-114708`	6.4 Medium	nh4tvd	Yes
2026-10-15 17:45	JetSmartFilters <= 3.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting JetSmartFilters <= 3.8.6	`CVE-2026-110890`	6.4 Medium	nh4tvd	Yes
2026-06-25 00:00	JetSmartFilters <= 3.8.3 - Unauthenticated SQL Injection JetSmartFilters <= 3.8.3	`CVE-2026-56067`	7.5 High	Nguyen Ba Khanh	Yes
2026-06-02 00:00	JetSmartFilters <= 3.8.1 - Unauthenticated SQL Injection JetSmartFilters <= 3.8.1	`CVE-2026-48875`	7.5 High	Austin Ginder	Yes
2025-07-16 00:00	JetSmartFilters <= 3.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting JetSmartFilters <= 3.6.8	`CVE-2025-54009`	6.4 Medium	stealthcopter	Yes
2025-07-16 00:00	JetSmartFilters <= 3.6.7 - Authenticated (Subscriber+) Sensitive Information Exposure JetSmartFilters <= 3.6.7	`CVE-2025-54008`	5.3 Medium	stealthcopter	Yes
2025-03-29 00:00	JetSmartFilters <= 3.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting JetSmartFilters <= 3.6.3	`CVE-2025-30963`	6.4 Medium	stealthcopter	Yes
2023-11-28 00:00	Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery JetSmartFilters <= 3.2.2	`CVE-2023-48762`	4.3 Medium	Rafie Muhammad	Yes
2023-11-28 00:00	Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action JetSmartFilters <= 3.2.2	`CVE-2023-48760`	7.3 High	Rafie Muhammad	Yes
2023-11-28 00:00	Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization JetSmartFilters <= 3.2.2	`CVE-2023-48761`	6.3 Medium	Rafie Muhammad	Yes

Showing 1–10 of 10 reports