What’s Vulnerable › Products
jetmonsters JetFormBuilder — Dynamic Blocks Form Builder vulnerabilities
7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.
Check whether your jetmonsters JetFormBuilder — Dynamic Blocks Form Builder version is affected
Latest jetmonsters JetFormBuilder — Dynamic Blocks Form Builder vulnerabilities
- CVE-2026-103912 — JetFormBuilder <= 3.6.6 - Reflected DOM-Based Cross-Site Scripting via 'query_var' Dynamic Preset via data-jfb-macro / JFB_FIELD:: Macro Renderer (CVSS 4.7)
- CVE-2026-97342 — JetFormBuilder <= 3.6.5.4 - Unauthenticated Stored Cross-Site Scripting via 'choice' Post Meta via Insert/Update Post Action (CVSS 7.2)
- CVE-2026-92212 — JetFormBuilder <= 3.6.5.3 - Reflected Cross-Site Scripting via 'jfb_xss' (URL Query Variable) Parameter via Calculated Field (CVSS 6.1)
- CVE-2026-12793 — JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter (CVSS 9.8)
- CVE-2026-13459 — JetFormBuilder <= 3.6.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'context' Parameter (CVSS 5.3)
- CVE-2026-4373 — JetFormBuilder <= 3.5.6.2 - Unauthenticated Arbitrary File Read via Media Field (CVSS 7.5)
- CVE-2025-11991 — JetFormBuilder <= 3.5.3 - Missing Authorization to Unauthenticated Form Generation (CVSS 5.3)