Jetmonsters JetFormBuilder vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Jetmonsters JetFormBuilder: 6 record(s), with affected versions and fixes.

CVE-2026-102391 High · 7.1 CWE-79 Sep 30, 2026

WordPress JetFormBuilder plugin <= 3.6.5.4 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.4 versions.

CVE-2026-28140 High · 7.5 CWE-862 Aug 6, 2026

WordPress JetFormBuilder plugin <= 3.6.4.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in JetFormBuilder <= 3.6.4.1 versions.

CVE-2026-54196 Medium · 6.8 CWE-266 Jun 17, 2026

WordPress JetFormBuilder plugin <= 3.6.1 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Jetmonsters JetFormBuilder allows Privilege Escalation. This issue affects JetFormBuilder: from n/a through 3.6.1.

CVE-2026-54195 High · 7.1 CWE-79 Jun 17, 2026

WordPress JetFormBuilder plugin <= 3.6.0.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.0.1 versions.

CVE-2026-32525 Critical · 9.9 CWE-94 Mar 25, 2026

JetFormBuilder (jetmonsters) - Code Injection (CWE-94)

Improper Control of Generation of Code ('Code Injection') vulnerability in jetmonsters JetFormBuilder jetformbuilder allows Code Injection.This issue affects JetFormBuilder: from n/a through <= 3.5.6.1.

CVE-2025-64384 Medium · 5.3 CWE-862 Nov 13, 2025

WordPress JetFormBuilder plugin <= 3.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in jetmonsters JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder: from n/a through <= 3.5.3.