Known Vulnerabilities for JetFormBuilder by Jetmonsters
Listed below are 10 of the newest known vulnerabilities associated with "JetFormBuilder" by "Jetmonsters".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-102391 json | Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.4 versions. | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-92212 json | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via '... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-84817 json | Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.1 versions. | Not Provided | 2026-09-08 | 2026-09-08 |
| CVE-2026-54196 json | Incorrect Privilege Assignment vulnerability in Jetmonsters JetFormBuilder allows Privilege Escalation. This issue affects J... | Not Provided | 2026-06-17 | 2026-09-16 |
| CVE-2026-28140 json | Unauthenticated Broken Access Control in JetFormBuilder <= 3.6.4.1 versions. | Not Provided | 2026-08-06 | 2026-08-06 |
| CVE-2026-19862 json | The JetFormBuilder WordPress plugin before 3.6.5.2 does not validate or strip line breaks from address values it sources from... | Not Provided | 2026-09-06 | 2026-09-06 |
| CVE-2026-19861 json | The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.2 does not properly sanitise and escape a fo... | Not Provided | 2026-09-05 | 2026-09-06 |
| CVE-2026-19860 json | The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.3 does not sufficiently restrict which PHP f... | Not Provided | 2026-09-19 | 2026-09-19 |
| CVE-2026-19859 json | The JetFormBuilder WordPress plugin before 3.6.5.2 does not sanitize a request parameter before rendering it as message conte... | Not Provided | 2026-09-06 | 2026-09-06 |
| CVE-2026-19858 json | The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.2 does not perform authorisation checks when... | Not Provided | 2026-09-05 | 2026-09-06 |