CVE Database /
CVE-2026-49075
CVE · Critical
CVE-2026-49075 — JetEngine [jet-engine] < 3.8.10
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-49075
|
JetEngine [jet-engine] < 3.8.10 |
Deserialization of Untrusted Data |
Critical
9.8
|
< 3.8.10
|
3.8.10 |
2026-06-08 |
—
|
CVE-2026-49075
The JetEngine WordPress plugin contains a vulnerability that allows attackers with contributor-level access and above to inject malicious PHP objects through untrusted input deserialization in versions up to 3.8.9.1. This flaw can be exploited to potentially delete files, extract confidential information, or run unauthorized code if an additional plugin or theme is installed on the affected system.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings