Plugin icon

JetFormBuilder — Dynamic Blocks Form Builder

jetformbuilder

Vulnerabilities:

8

Last Updated:

April 27, 2026

Active Installs:

90000

Published
Title
Fixed in
CVSS
Published
2026-03-23
Title
JetFormBuilder — Dynamic Blocks Form Builder < 3.5.6.2 - Authenticated (Contributor+) Remote Code Execution
Fixed in
Fixed in 3.5.6.2
CVSS
7.2 (high)
Published
2026-03-20
Title
JetFormBuilder < 3.5.6.3 - Unauthenticated Arbitrary File Read via Media Field
Fixed in
Fixed in 3.5.6.3
CVSS
7.5 (high)
Published
2025-12-15
Title
JetFormBuilder < 3.5.4 - Missing Authorization to Unauthenticated Form Generation
Fixed in
Fixed in 3.5.4
CVSS
5.3 (medium)
Published
2025-11-29
Title
JetFormBuilder < 3.5.4 - Missing Authorization
Fixed in
Fixed in 3.5.4
CVSS
5.3 (medium)
Published
2025-07-16
Title
JetFormBuilder < 3.5.2 - Authenticated (Administrator+) PHP Object Injection
Fixed in
Fixed in 3.5.2
CVSS
6.6 (medium)
Published
2024-08-02
Title
JetFormBuilder < 3.3.4.2 - Authenticated (Administrator+) Privilege Escalation
Fixed in
Fixed in 3.3.4.2
CVSS
7.2 (high)
Published
2023-11-28
Title
JetFormBuilder < 3.1.5 - Unauthenticated Content Injection
Fixed in
Fixed in 3.1.5
CVSS
5.3 (medium)
Published
2023-05-24
Title
JetFormBuilder < 3.0.7 - Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 3.0.7
CVSS
4.3 (medium)