JE
Product
JetFormBuilder
by jetmonsters · last CVE Sep 30, 2026
7
CVEs
0
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 1High 4Medium 2Low 0
Watch

Add JetFormBuilder to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-32525
9.9
0%
Mar 25
WordPress JetFormBuilder plugin <= 3.5.6.1 - Remote Code Execution (RCE) vulnerability
Affected: through <= 3.5.6.1
CVE-2026-28140
7.5
0%
Aug 6
WordPress JetFormBuilder plugin <= 3.6.4.1 - Broken Access Control vulnerability
Affected: through 3.6.4.1
CVE-2025-53990
7.2
1%
Jul 16
WordPress JetFormBuilder plugin <= 3.5.1.2 - PHP Object Injection Vulnerability
Affected: through 3.5.1.2
CVE-2026-102391
7.1
0%
Sep 30
WordPress JetFormBuilder plugin <= 3.6.5.4 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.6.5.4
CVE-2026-54195
7.1
0%
Jun 17
WordPress JetFormBuilder plugin <= 3.6.0.1 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.6.0.1
CVE-2026-54196
6.8
0%
Jun 17
WordPress JetFormBuilder plugin <= 3.6.1 - Privilege Escalation vulnerability
Affected: through 3.6.1
CVE-2025-64384
5.3
0%
Nov 13
WordPress JetFormBuilder plugin <= 3.5.3 - Broken Access Control vulnerability
Affected: through 3.5.3
Showing 7