Description
Unauthenticated Broken Access Control in JetFormBuilder <= 3.6.4.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| jetmonsters | JetFormBuilder | ≤ 3.6.4.1 | — |
High · 7.5
CVE-2026-28140
EUVD-2026-53943GHSA-6m3c-4457-37qm
WordPress JetFormBuilder plugin <= 3.6.4.1 - Broken Access Control vulnerability
Published Aug 6, 2026 · Updated Aug 6, 2026 · Assigned by Patchstack