JetFormBuilder — Dynamic Blocks Form Builder

Уязвимости

• CVE-2026-32525нужен вход≤ <= 3.5.6.1

  WordPress JetFormBuilder plugin <= 3.5.6.1 - Remote Code Execution (RCE) vulnerability

  Критич. 9.9

• CVE-2026-12793без авторизации≤ 3.6.2

  JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter

  Критич. 9.8

• CVE-2023-33212без авторизации · нужен клик≤ 3.0.6

  WordPress JetFormBuilder Plugin <= 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2026-28140без авторизации≤ 3.6.4.1

  WordPress JetFormBuilder plugin <= 3.6.4.1 - Broken Access Control vulnerability

  Высокий 7.5

• CVE-2026-4373без авторизации≤ 3.5.6.2

  JetFormBuilder <= 3.5.6.2 - Unauthenticated Arbitrary File Read via Media Field

  Высокий 7.5

• CVE-2026-97342без авторизации≤ 3.6.5.4

  JetFormBuilder <= 3.6.5.4 - Unauthenticated Stored Cross-Site Scripting via 'choice' Post Meta via Insert/Update Post Action

  Высокий 7.2

• CVE-2025-53990высокие права≤ 3.5.1.2

  WordPress JetFormBuilder plugin <= 3.5.1.2 - PHP Object Injection Vulnerability

  Высокий 7.2

• CVE-2024-7291админ≤ 3.3.4.1

  JetFormBuilder <= 3.3.4.1 - Authenticated (Administrator+) Privilege Escalation

  Высокий 7.2

• CVE-2023-37866высокие права≤ 3.0.8

  WordPress JetFormBuilder plugin <= 3.0.8 - Authenticated Privilege Escalation vulnerability

  Высокий 7.2

• CVE-2026-102391без авторизации · нужен клик≤ 3.6.5.4

  WordPress JetFormBuilder plugin <= 3.6.5.4 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-84817без авторизации · нужен клик≤ 3.6.5.1

  WordPress JetFormBuilder plugin <= 3.6.5.1 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-54195без авторизации · нужен клик≤ 3.6.0.1

  WordPress JetFormBuilder plugin <= 3.6.0.1 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-54196нужен вход≤ 3.6.1

  WordPress JetFormBuilder plugin <= 3.6.1 - Privilege Escalation vulnerability

  Средний 6.8

• CVE-2026-92212без авторизации · нужен клик≤ 3.6.5.3

  JetFormBuilder <= 3.6.5.3 - Reflected Cross-Site Scripting via 'jfb_xss' (URL Query Variable) Parameter via Calculated Field

  Средний 6.1

• CVE-2026-13459без авторизации≤ 3.6.3

  JetFormBuilder <= 3.6.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'context' Parameter

  Средний 5.3

• CVE-2025-11991без авторизации≤ 3.5.3

  JetFormBuilder <= 3.5.3 - Missing Authorization to Unauthenticated Form Generation

  Средний 5.3

• CVE-2025-64384без авторизации≤ 3.5.3

  WordPress JetFormBuilder plugin <= 3.5.3 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2023-48763без авторизации≤ 3.1.4

  WordPress JetFormBuilder plugin <= 3.1.4 - Content Injection vulnerability

  Средний 5.3