CrocoBlock JetFormBuilder

• CVE-2026-123860 Medium 5.3 WordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerability –
• CVE-2026-123483 Medium 5.3 WordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerability –
• CVE-2026-119481 Critical 9.8 WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability 0.4%
• CVE-2026-119480 Medium 6.5 WordPress JetFormBuilder plugin <= 3.6.7.1 - Attachment Deletion Via Media-Field Preset vulnerability 0.4%
• CVE-2026-119479 Medium 5.3 WordPress JetFormBuilder plugin <= 3.6.7.1 - Content Injection vulnerability 0.3%
• CVE-2026-119482 Medium 5.3 WordPress JetFormBuilder plugin <= 3.6.7.1 - Broken Access Control vulnerability 0.3%
• CVE-2026-107431 High 7.5 WordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerability 0.3%
• CVE-2026-84817 High 7.1 WordPress JetFormBuilder plugin <= 3.6.5.1 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2023-37866 High 7.2 WordPress JetFormBuilder plugin <= 3.0.8 - Authenticated Privilege Escalation vulnerability 0.8%
• CVE-2023-48763 Medium 5.3 WordPress JetFormBuilder plugin <= 3.1.4 - Content Injection vulnerability 0.4%