What’s Vulnerable › Products

jetmonsters JetFormBuilder vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your jetmonsters JetFormBuilder version is affected

Latest jetmonsters JetFormBuilder vulnerabilities

• CVE-2026-102391 — WordPress JetFormBuilder plugin <= 3.6.5.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-28140 — WordPress JetFormBuilder plugin <= 3.6.4.1 - Broken Access Control vulnerability (CVSS 7.5)
• CVE-2026-54196 — WordPress JetFormBuilder plugin <= 3.6.1 - Privilege Escalation vulnerability (CVSS 6.8)
• CVE-2026-54195 — WordPress JetFormBuilder plugin <= 3.6.0.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-32525 — WordPress JetFormBuilder plugin <= 3.5.6.1 - Remote Code Execution (RCE) vulnerability (CVSS 9.9)
• CVE-2025-64384 — WordPress JetFormBuilder plugin <= 3.5.3 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2025-53990 — WordPress JetFormBuilder plugin <= 3.5.1.2 - PHP Object Injection Vulnerability (CVSS 7.2)