Vulnerabilities / JetFormBuilder — Dynamic Blocks Form Builder
JetFormBuilder — Dynamic Blocks Form Builder vulnerabilities
Advisories WPSec published for JetFormBuilder — Dynamic Blocks Form Builder. Other sources may list more. Its attack surface: JetFormBuilder — Dynamic Blocks Form Builder on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-22 | WPSEC-2026-1438 | JetFormBuilder — Dynamic Blocks Form Builder <= 3.6.7 - Unauthenticated Stored Cross-Site Scripting via Preset Field Values | High 7.2 | 3.6.7.1 |
| 2026-10-10 | WPSEC-2026-0690 | JetFormBuilder <= 3.6.6 - Unauthenticated Missing Authorization to Media Field Value Modification | Low 3.7 | 3.6.6.1 |
| 2026-10-10 | WPSEC-2026-0689 | JetFormBuilder <= 3.6.6 - Unauthenticated Insecure Direct Object Reference to Anonymous Post Update and Trash | Medium 5.3 | 3.6.6.1 |
| 2026-10-02 | WPSEC-2026-0273 | JetFormBuilder <= 3.6.5.4 - Unauthenticated Arbitrary Attachment Deletion via Media Field | Medium 4.8 | 3.6.6 |
License: CC BY 4.0