JetTricks

JetTricks has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 7 are fixed as of October 2026. Their average CVSS score is 5.8, and the most serious one scores 7.3 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 3 disclosures.

The most common weakness is Missing Authorization, behind 3 of the records (43%). Other recurring categories include Improper Neutralization Of Input During Web Page Generation, Cross-Site Request Forgery.

Every one of the 7 issues recorded for JetTricks has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (3) reported by Rafie Muhammad.

Strategic Overview

Avg CVSSMedium

5.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all JetTricks vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.3CVE-2023-48760

Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action

Read the full analysis

Vulnerability Records

7 records


2026-09-23 16:43	JetTricks <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting JetTricks <= 2.0.1	`CVE-2026-93618`	6.4 Medium	nh4tvd	Yes
2025-07-16 00:00	JetTricks <= 1.5.4.1 - Authenticated (Subscriber+) Information Exposure JetTricks <= 1.5.4.1	`CVE-2025-53992`	4.3 Medium	stealthcopter	Yes
2025-07-16 00:00	JetTricks <= 1.5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting JetTricks <= 1.5.4.1	`CVE-2025-53991`	6.4 Medium	stealthcopter	Yes
2025-04-15 00:00	JetTricks <= 1.5.1 - Missing Authorization JetTricks <= 1.5.1	`CVE-2025-26942`	5.3 Medium	stealthcopter	Yes
2023-11-28 00:00	Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery JetTricks <= 1.4.6.1	`CVE-2023-48762`	4.3 Medium	Rafie Muhammad	Yes
2023-11-28 00:00	Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action JetTricks <= 1.4.6.1	`CVE-2023-48760`	7.3 High	Rafie Muhammad	Yes
2023-11-28 00:00	Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization JetTricks <= 1.4.6.1	`CVE-2023-48761`	6.3 Medium	Rafie Muhammad	Yes

Showing 1–7 of 7 reports