CVE-2023-1406: Crocoblock Jetengine For Elementor

High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days.

The JetEngine WordPress plugin before 3.1.3.1 includes uploaded files without adequately ensuring that they are not executable, leading to a remote code execution vulnerability.

Affected products

• Crocoblock Jetengine For Elementor: before 3.1.3.1 (fixed in 3.1.3.1)

Published 2023-04-10. Last modified 2026-06-17.