What’s Vulnerable › Products

JetFormBuilder vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your JetFormBuilder version is affected

Latest JetFormBuilder vulnerabilities

• CVE-2026-19862 — JetFormBuilder < 3.6.5.2 - Unauthenticated Email Header Injection via Send Email Action (CVSS 4.8)
• CVE-2026-19859 — JetFormBuilder < 3.6.5.2 - Unauthenticated Arbitrary Shortcode Execution via 'status' Parameter (CVSS 6.5)