Plugin security history

JetWooBuilder Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 8 vulnerability records associated with JetWooBuilder, published between 2023 and 2025.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

8Total records

0Critical

2High

6Medium

0Low

0Informational

8Patched records

0Currently marked unpatched

2023-11-28First disclosure

2025-08-03Latest disclosure

8 of 8CVE coverage

Year-by-Year Timeline

Year	Records	Relative volume
2023	3	3 records
2025	5	5 records

Severity Breakdown

Severity	Records	Share
High	2	25%
Medium	6	75%

Vulnerability-Type Breakdown

Missing Authorization

3 records37.5%

First: 2023. Latest: 2025.

Cross-Site Scripting

2 records25%

First: 2025. Latest: 2025.

CSRF

1 record12.5%

First: 2023. Latest: 2023.

Other

1 record12.5%

First: 2025. Latest: 2025.

Information Disclosure

1 record12.5%

First: 2025. Latest: 2025.

Patch Status

Patched: 8
Currently marked unpatched: 0
Unknown status: 0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

2.2.0
2.1.20.1
2.1.18.1
2.1.7.3

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected range	Vulnerability	Published	Patched version	Severity
`*-2.1.20.1`	JetWooBuilder <= 2.1.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting	August 3, 2025	2.2.0	Medium
`*-2.1.20`	JetWooBuilder <= 2.1.20 - Authenticated (Subscriber+) Information Exposure	July 16, 2025	2.1.20.1	Medium
`*-2.1.20`	JetWooBuilder <= 2.1.20 - Authenticated (Contributor+) Stored Cross-Site Scripting	July 16, 2025	2.1.20.1	Medium
`*-2.1.18`	JetWooBuilder <= 2.1.18 - Missing Authorization	April 17, 2025	2.1.18.1	Medium
`*-2.1.18`	JetWooBuilder <= 2.1.18 - Authenticated (Contributor+) Local File Inclusion	March 29, 2025	2.1.18.1	High
`*-2.1.7.2`	Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization	November 28, 2023	2.1.7.3	Medium
`*-2.1.7.2`	Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action	November 28, 2023	2.1.7.3	High
`*-2.1.7.2`	Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery	November 28, 2023	2.1.7.3	Medium

Selected source records

Latest Records

MediumCVE-2025-49927

JetWooBuilder <= 2.1.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: August 3, 2025

Affected versions: *-2.1.20.1
Patched versions: 2.2.0

Original Wordfence record

MediumCVE-2025-49928

JetWooBuilder <= 2.1.20 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: July 16, 2025

Affected versions: *-2.1.20
Patched versions: 2.1.20.1

Original Wordfence record

MediumCVE-2025-53998

JetWooBuilder <= 2.1.20 - Authenticated (Subscriber+) Information Exposure

Published: July 16, 2025

Affected versions: *-2.1.20
Patched versions: 2.1.20.1

Original Wordfence record

MediumCVE-2025-39449

JetWooBuilder <= 2.1.18 - Missing Authorization

Published: April 17, 2025

Affected versions: *-2.1.18
Patched versions: 2.1.18.1

Original Wordfence record

HighCVE-2025-31016

JetWooBuilder <= 2.1.18 - Authenticated (Contributor+) Local File Inclusion

Published: March 29, 2025

Affected versions: *-2.1.18
Patched versions: 2.1.18.1

Original Wordfence record

MediumCVE-2023-48762

Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery

Published: November 28, 2023

Affected versions: *-3.1.2
Patched versions: 3.1.2.1

Affected versions: *-2.1.25.1
Patched versions: 2.1.25.2

Affected versions: *-2.3.5
Patched versions: 2.3.5.1

Affected versions: *-2.1.2.1
Patched versions: 2.1.2.2

Affected versions: *-1.5.5.1
Patched versions: 1.5.5.2

Affected versions: *-2.6.13
Patched versions: 2.6.13.1

Affected versions: *-2.0.2
Patched versions: 2.0.2.1

Affected versions: *-2.1.7.2
Patched versions: 2.1.7.3

Affected versions: *-2.3.2
Patched versions: 2.3.2.1

Affected versions: *-3.2.5.1
Patched versions: 3.2.5.2

Affected versions: *-1.4.6.1
Patched versions: 1.4.6.2

Affected versions: *-2.4.1
Patched versions: 2.4.2

Affected versions: *-1.3.8
Patched versions: 1.3.8.1

Affected versions: *-2.1.13.1
Patched versions: 2.1.13.2

Affected versions: *-3.2.2
Patched versions: 3.2.2.1

Original Wordfence record

HighCVE-2023-48760

Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action

Published: November 28, 2023

Affected versions: *-2.1.25.1
Patched versions: 2.1.25.2

Affected versions: *-2.3.5
Patched versions: 2.3.5.1

Affected versions: *-2.1.2.1
Patched versions: 2.1.2.2

Affected versions: *-1.5.5.1
Patched versions: 1.5.5.2

Affected versions: *-2.6.13
Patched versions: 2.6.13.1

Affected versions: *-2.1.7.2
Patched versions: 2.1.7.3

Affected versions: *-2.3.2
Patched versions: 2.3.2.1

Affected versions: *-1.4.6.1
Patched versions: 1.4.6.2

Affected versions: *-2.4.1
Patched versions: 2.4.2

Affected versions: *-1.3.8
Patched versions: 1.3.8.1

Affected versions: *-2.1.13.1
Patched versions: 2.1.13.2

Affected versions: *-3.2.2
Patched versions: 3.2.2.1

Original Wordfence record

MediumCVE-2023-48761

Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization

Published: November 28, 2023

Affected versions: *-3.1.2
Patched versions: 3.1.2.1

Affected versions: *-2.1.25.1
Patched versions: 2.1.25.2

Affected versions: *-2.3.5
Patched versions: 2.3.5.1

Affected versions: *-2.1.2.1
Patched versions: 2.1.2.2

Affected versions: *-1.5.5.1
Patched versions: 1.5.5.2

Affected versions: *-2.6.13
Patched versions: 2.6.13.1

Affected versions: *-2.0.2
Patched versions: 2.0.2.1

Affected versions: *-2.1.7.2
Patched versions: 2.1.7.3

Affected versions: *-2.3.2
Patched versions: 2.3.2.1

Affected versions: *-3.2.5.1
Patched versions: 3.2.5.2

Affected versions: *-1.4.6.1
Patched versions: 1.4.6.2

Affected versions: *-2.4.1
Patched versions: 2.4.2

Affected versions: *-1.3.8
Patched versions: 1.3.8.1

Affected versions: *-2.1.13.1
Patched versions: 2.1.13.2

Affected versions: *-3.2.2
Patched versions: 3.2.2.1

Original Wordfence record

Highest-Severity Records

HighCVE-2025-31016

JetWooBuilder <= 2.1.18 - Authenticated (Contributor+) Local File Inclusion

Published: March 29, 2025

Affected versions: *-2.1.18
Patched versions: 2.1.18.1

Original Wordfence record

HighCVE-2023-48760

Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action

Published: November 28, 2023

Affected versions: *-2.1.25.1
Patched versions: 2.1.25.2

Affected versions: *-2.3.5
Patched versions: 2.3.5.1

Affected versions: *-2.1.2.1
Patched versions: 2.1.2.2

Affected versions: *-1.5.5.1
Patched versions: 1.5.5.2

Affected versions: *-2.6.13
Patched versions: 2.6.13.1

Affected versions: *-2.1.7.2
Patched versions: 2.1.7.3

Affected versions: *-2.3.2
Patched versions: 2.3.2.1

Affected versions: *-1.4.6.1
Patched versions: 1.4.6.2

Affected versions: *-2.4.1
Patched versions: 2.4.2

Affected versions: *-1.3.8
Patched versions: 1.3.8.1

Affected versions: *-2.1.13.1
Patched versions: 2.1.13.2

Affected versions: *-3.2.2
Patched versions: 3.2.2.1

Original Wordfence record

MediumCVE-2025-49928

JetWooBuilder <= 2.1.20 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: July 16, 2025

Affected versions: *-2.1.20
Patched versions: 2.1.20.1

Original Wordfence record

MediumCVE-2025-49927

JetWooBuilder <= 2.1.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: August 3, 2025

Affected versions: *-2.1.20.1
Patched versions: 2.2.0

Original Wordfence record

MediumCVE-2023-48761

Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization

Published: November 28, 2023

Affected versions: *-3.1.2
Patched versions: 3.1.2.1

Affected versions: *-2.1.25.1
Patched versions: 2.1.25.2

Affected versions: *-2.3.5
Patched versions: 2.3.5.1

Affected versions: *-2.1.2.1
Patched versions: 2.1.2.2

Affected versions: *-1.5.5.1
Patched versions: 1.5.5.2

Affected versions: *-2.6.13
Patched versions: 2.6.13.1

Affected versions: *-2.0.2
Patched versions: 2.0.2.1

Affected versions: *-2.1.7.2
Patched versions: 2.1.7.3

Affected versions: *-2.3.2
Patched versions: 2.3.2.1

Affected versions: *-3.2.5.1
Patched versions: 3.2.5.2

Affected versions: *-1.4.6.1
Patched versions: 1.4.6.2

Affected versions: *-2.4.1
Patched versions: 2.4.2

Affected versions: *-1.3.8
Patched versions: 1.3.8.1

Affected versions: *-2.1.13.1
Patched versions: 2.1.13.2

Affected versions: *-3.2.2
Patched versions: 3.2.2.1

Original Wordfence record

MediumCVE-2025-39449

JetWooBuilder <= 2.1.18 - Missing Authorization

Published: April 17, 2025

Affected versions: *-2.1.18
Patched versions: 2.1.18.1

Original Wordfence record

MediumCVE-2023-48762

Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery

Published: November 28, 2023

Affected versions: *-3.1.2
Patched versions: 3.1.2.1

Affected versions: *-2.1.25.1
Patched versions: 2.1.25.2

Affected versions: *-2.3.5
Patched versions: 2.3.5.1

Affected versions: *-2.1.2.1
Patched versions: 2.1.2.2

Affected versions: *-1.5.5.1
Patched versions: 1.5.5.2

Affected versions: *-2.6.13
Patched versions: 2.6.13.1

Affected versions: *-2.0.2
Patched versions: 2.0.2.1

Affected versions: *-2.1.7.2
Patched versions: 2.1.7.3

Affected versions: *-2.3.2
Patched versions: 2.3.2.1

Affected versions: *-3.2.5.1
Patched versions: 3.2.5.2

Affected versions: *-1.4.6.1
Patched versions: 1.4.6.2

Affected versions: *-2.4.1
Patched versions: 2.4.2

Affected versions: *-1.3.8
Patched versions: 1.3.8.1

Affected versions: *-2.1.13.1
Patched versions: 2.1.13.2

Affected versions: *-3.2.2
Patched versions: 3.2.2.1

Original Wordfence record

MediumCVE-2025-53998

JetWooBuilder <= 2.1.20 - Authenticated (Subscriber+) Information Exposure

Published: July 16, 2025

Affected versions: *-2.1.20
Patched versions: 2.1.20.1

Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

WordPress Malware Removal WordPress Security Maintenance Contact 3Zero Digital

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory