CVE-2025-68503
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
The JetBlog plugin by Crocoblock is vulnerable to missing authorization, allowing exploitation of incorrectly configured access control security levels. This issue affects JetBlog versions from n/a through 2.4.7.
Risk Assessment
An unauthorized user may gain access to functions or data they should not have permissions for. This may lead to content modification or information disclosure.
Recommendation
Update the JetBlog plugin to a version later than 2.4.7 that fixes the vulnerability. If update is not possible, consider disabling the plugin.
Other vulnerabilities in JetBlog
See all- CVE-2026-52696High
In JetBlog versions up to 2.4.8, there is a vulnerability allowing unauthorized access to sensitive data.
- CVE-2026-66572Medium
The JetBlog plugin in versions up to and including 2.4.10 is vulnerable to Cross Site Scripting (XSS). A user with Contributor privileges can inject a malicious script.
Original NVD description (English source)
Missing Authorization vulnerability in Crocoblock JetBlog jet-blog allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetBlog: from n/a through <= 2.4.7.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS