Plugin icon

JetFormBuilder — Dynamic Blocks Form Builder

jetformbuilder

Vulnerabilities:

10

Last Updated:

June 25, 2026

Active Installs:

90000

Published
Title
Fixed in
CVSS
Published
2026-06-16
Title
JetFormBuilder — Dynamic Blocks Form Builder < 3.6.1 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 3.6.1
CVSS
7.2 (high)
Published
2026-06-16
Title
JetFormBuilder — Dynamic Blocks Form Builder < 3.6.1.1 - Subscriber+ Privilege Escalation
Fixed in
Fixed in 3.6.1.1
CVSS
8.8 (high)
Published
2026-03-23
Title
JetFormBuilder — Dynamic Blocks Form Builder < 3.5.6.2 - Authenticated (Contributor+) Remote Code Execution
Fixed in
Fixed in 3.5.6.2
CVSS
7.2 (high)
Published
2026-03-20
Title
JetFormBuilder < 3.5.6.3 - Unauthenticated Arbitrary File Read via Media Field
Fixed in
Fixed in 3.5.6.3
CVSS
7.5 (high)
Published
2025-12-15
Title
JetFormBuilder < 3.5.4 - Missing Authorization to Unauthenticated Form Generation
Fixed in
Fixed in 3.5.4
CVSS
5.3 (medium)
Published
2025-11-29
Title
JetFormBuilder < 3.5.4 - Missing Authorization
Fixed in
Fixed in 3.5.4
CVSS
5.3 (medium)
Published
2025-07-16
Title
JetFormBuilder < 3.5.2 - Authenticated (Administrator+) PHP Object Injection
Fixed in
Fixed in 3.5.2
CVSS
6.6 (medium)
Published
2024-08-02
Title
JetFormBuilder < 3.3.4.2 - Authenticated (Administrator+) Privilege Escalation
Fixed in
Fixed in 3.3.4.2
CVSS
7.2 (high)
Published
2023-11-28
Title
JetFormBuilder < 3.1.5 - Unauthenticated Content Injection
Fixed in
Fixed in 3.1.5
CVSS
5.3 (medium)
Published
2023-05-24
Title
JetFormBuilder < 3.0.7 - Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 3.0.7
CVSS
4.3 (medium)