shouldiuse.io

Categories

VERDICT

Crocoblock Review

Depends

Should I use Crocoblock?

Skip to content - crocoblock.com

· 1 month ago

Buy it if you're an agency or freelancer building directories, listings, or membership sites on WordPress and can stomach a learning curve. Skip it if you just need a simple site — a page builder or plain Gutenberg does that for far less.

Confidence

Medium. Based on ~20 public sources; many snippets truncated, limiting verbatim quotes and exact prices.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

All-Inclusive Yearly

Not disclosed in reviewed sources

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
All-Inclusive LifetimeNot disclosed in reviewed sources

Best for

  • Freelancers and agencies building dynamic WordPress sites
  • Directory, listing, and membership sites
  • Elementor/Gutenberg power users
  • Custom post types and filters without heavy coding

Not for

  • Simple blogs or brochure sites — massive overkill
  • Non-technical users wanting a one-click website
  • Anyone unwilling to learn JetEngine's workflow
  • Security-sensitive sites that can't patch plugins quickly

Gotchas - check before you buy

high

JetEngine <=3.1.3 had an authenticated file-upload-to-RCE flaw; updating plugins is mandatory, not optional.

medium

2025-2026 advisories span several plugins (JetTabs, JetElements, JetBlog); patch quickly after releases.

medium

Users report needing Elementor Pro alongside it — budget for both subscriptions.

low

Refunds only within 30 days and only per Terms of Use conditions.

Pros and cons

Pros

  • 20+ plugin bundle covering dynamic content, forms, filters, and search
  • Works with both Elementor and Gutenberg
  • Yearly and lifetime all-inclusive plans available
  • 30-day refund policy per Terms of Use
  • Runs a Patchstack security partnership and publishes a security page

Cons

  • Multiple CVEs across JetPlugins, including JetEngine RCE and code injection
  • Steep learning curve; reviews position it for 'WordPress nerds'
  • Reddit threads question whether the investment is worth it
  • Users debate also needing Elementor Pro — added cost and coupling

Sources & method

- 12 sources - Several 2025-2026 CVEs across JetPlugins, including a JetEngine remote code execution flaw; vendor runs a Patchstack partnership and a security page.

official x3review x6security x3
  • JetEngine arbitrary file upload to RCE (<=3.1.3), Authenticated (Author+) users could upload files and achieve remote code execution.
  • CVE-2025-53194 — JetEngine code injection, Code injection vulnerability in JetEngine tracked in the SentinelOne vulnerability database.
  • CVE-2025-54687 — JetTabs DOM-based XSS, DOM-based cross-site scripting vulnerability in JetTabs.
  • CVE-2025-39447 — JetElements missing authorization, Missing authorization vulnerability in JetElements for Elementor.
  • CVE-2025-68503 — JetBlog missing authorization, Missing authorization vulnerability in the JetBlog plugin.

Key stats

  • Value for money: 3/5

    Rating

  • Not disclosed

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 3/5. Big bundle, but Reddit users debate the investment
  • Ease of use: 2/5. Positioned for 'WordPress nerds'; steep learning curve
  • Feature depth: 5/5. 20+ plugins covering dynamic content end to end
  • Support quality: 4/5. Trustpilot 5 stars; G2 users commend it
  • Security posture: 2/5. Multiple CVEs including JetEngine RCE; Patchstack program
  • 5/5 Trustpilot rating Trustpilot customer reviews
  • 31 G2 reviews G2 seller profile
  • 85K+ Claimed users Per official all-inclusive page
  • 30 days Refund window Per Terms of Use

Pricing

All-Inclusive Yearly

Not disclosed

  • Full JetPlugins bundle
  • Support included

All-Inclusive Lifetime

Not disclosed

  • One-time payment
  • Full JetPlugins bundle

Security

Several 2025-2026 CVEs across JetPlugins, including a JetEngine remote code execution flaw; vendor runs a Patchstack partnership and a security page.

  • JetEngine arbitrary file upload to RCE (<=3.1.3)Authenticated (Author+) users could upload files and achieve remote code execution.11
  • CVE-2025-53194 — JetEngine code injectionCode injection vulnerability in JetEngine tracked in the SentinelOne vulnerability database.12
  • CVE-2025-54687 — JetTabs DOM-based XSSDOM-based cross-site scripting vulnerability in JetTabs.
  • CVE-2025-39447 — JetElements missing authorizationMissing authorization vulnerability in JetElements for Elementor.
  • CVE-2025-68503 — JetBlog missing authorizationMissing authorization vulnerability in the JetBlog plugin.

What users say

Trustpilot shows 5-star ratings and G2 users commend it, while Reddit threads weigh whether the investment pays off.

“Crocoblock has 5 stars!”
Trustpilot

Alternatives

Compare Crocoblock with each alternative.

  • Native WordPress (Gutenberg)

    Free and enough for blogs and brochure sites.

Companies that use it

  • Xrilion
  • Pueblea
Full analysis

Based on ~20 public sources; many snippets truncated, limiting verbatim quotes and exact prices.

Powerful JetPlugins bundle for agencies building dynamic WordPress sites — overkill for simple sites, and patch CVEs fast.

Methodology

Based on ~20 public sources; many snippets truncated, limiting verbatim quotes and exact prices.

Read how a report is made.

Sources

  1. Crocoblock Trustpilot reviewstrustpilot.com
    review
  2. Crocoblock Products on G2 (31 reviews)g2.com
    review
  3. CROCOblock and Jetplugins - worth the investment? (Reddit)reddit.com
    review
  4. Crocoblock Review: A Great WordPress Toolkit for Agencieswppagebuilders.com
    review
  5. I Used Crocoblock for Two Years - Here's My Review for 2024ecommerce-platforms.com
    review
  6. Crocoblock Review: All-In-One ToolKit for WordPress Nerdsfetchprofits.com
    review
  7. JetEngine plugin page (Elementor, Gutenberg)crocoblock.com
    official
  8. All-Inclusive Yearly and Lifetime Subscription Planscrocoblock.com
    official
  9. Asking for a Refund according to the Terms of Usecrocoblock.com
    official
  10. Crocoblock and Patchstack Partnershipcrocoblock.com
    security
  11. JetEngine <=3.1.3 Arbitrary File Upload to RCE (Wordfence)wordfence.com
    security
  12. CVE-2025-53194: JetEngine Code Injection Vulnerabilitysentinelone.com
    security

Add this review to your site

This check for Crocoblock says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends Crocoblock Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.