Skip to content
OpenAdvisories

Product · Crocoblock

JetFormBuilder

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.1
    CVE-2026-123482

    WordPress JetFormBuilder plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Stored XSS.This issue affects JetFormBuilder: from n/a through 3.6.8.

    Crocoblock JetFormBuilder
  • High 7.1
    CVE-2026-123484

    WordPress JetFormBuilder plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetFormBuilder jetformbuilder allows DOM-Based XSS.This issue affects JetFormBuilder: from n/a through 3.6.8.

    Crocoblock JetFormBuilder
  • High 7.5
    CVE-2026-107431

    WordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder: from n/a through 3.6.6.

    Crocoblock JetFormBuilder
  • High 7.1
    CVE-2026-84817

    WordPress JetFormBuilder plugin <= 3.6.5.1 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.1 versions.

    Crocoblock JetFormBuilder
  • High 7.2
    CVE-2023-37866

    WordPress JetFormBuilder plugin <= 3.0.8 - Authenticated Privilege Escalation vulnerability

    Improper Privilege Management vulnerability in Crocoblock JetFormBuilder allows Privilege Escalation.This issue affects JetFormBuilder: from n/a through 3.0.8.

    Crocoblock JetFormBuilder