CVE Database /
CVE-2026-52706
CVE · Critical
CVE-2026-52706 — JetEngine [jet-engine] < 3.8.10.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-52706
|
JetEngine [jet-engine] < 3.8.10.1 |
Deserialization of Untrusted Data |
Critical
9.8
|
< 3.8.10.1
|
3.8.10.1 |
2026-06-12 |
—
|
CVE-2026-52706
The JetEngine WordPress plugin contains a vulnerability that allows attackers to inject malicious PHP objects through untrusted input in versions up to 3.8.10. This flaw can be exploited by unauthorized individuals without authentication, potentially leading to the execution of code or access to sensitive information if other plugins or themes are installed on the affected system.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings