Jetformbuilder
This hub aggregates every CVE we track for Jetformbuilder, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.
9
CVEs tracked
1
Critical
4
High
0
In CISA KEV
Severity distribution
HIGH4MEDIUM4CRITICAL1
Monthly trend
0
0
0
0
0
0
0
0
0
0
1
0
0
0
1
0
0
0
1
0
0
2
0
1
2024-092026-08
Latest CVEs
The 9 most recently published vulnerabilities affecting Jetformbuilder.
- CVE-2026-28140WordPress JetFormBuilder plugin <= 3.6.4.1 - Broken Access Control vulnerability7.5
- CVE-2026-54196WordPress JetFormBuilder plugin <= 3.6.1 - Privilege Escalation vulnerability6.8
- CVE-2026-54195WordPress JetFormBuilder plugin <= 3.6.0.1 - Cross Site Scripting (XSS) vulnerability7.1
- CVE-2026-32525WordPress JetFormBuilder plugin <= 3.5.6.1 - Remote Code Execution (RCE) vulnerability9.9
- CVE-2025-64384WordPress JetFormBuilder plugin <= 3.5.3 - Broken Access Control vulnerability5.3
- CVE-2025-53990WordPress JetFormBuilder plugin <= 3.5.1.2 - PHP Object Injection Vulnerability7.2
- CVE-2023-37866WordPress JetFormBuilder plugin <= 3.0.8 - Authenticated Privilege Escalation vulnerability7.2
- CVE-2023-48763WordPress JetFormBuilder plugin <= 3.1.4 - Content Injection vulnerability5.3
- CVE-2023-33212WordPress JetFormBuilder Plugin <= 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF)4.3
Product normalization is registry-driven with AI assist and human review. How it works