Skip to content
OpenAdvisories

Product · jetmonsters

JetFormBuilder

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2026-102391

    WordPress JetFormBuilder plugin <= 3.6.5.4 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.4 versions.

    jetmonsters JetFormBuilder
  • High 7.5
    CVE-2026-28140

    WordPress JetFormBuilder plugin <= 3.6.4.1 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in JetFormBuilder <= 3.6.4.1 versions.

    jetmonsters JetFormBuilder
  • High 7.1
    CVE-2026-54195

    WordPress JetFormBuilder plugin <= 3.6.0.1 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.0.1 versions.

    jetmonsters JetFormBuilder
  • High 7.2
    CVE-2025-53990

    WordPress JetFormBuilder plugin <= 3.5.1.2 - PHP Object Injection Vulnerability

    Deserialization of Untrusted Data vulnerability in jetmonsters JetFormBuilder jetformbuilder allows Object Injection.This issue affects JetFormBuilder: from n/a through <= 3.5.1.2.

    jetmonsters JetFormBuilder