Unknown JetFormBuilder — Dynamic Blocks Form Builder

• CVE-2026-19860 Medium 5.5 JetFormBuilder 3.5.6.2 - 3.6.5.2 - Admin+ Arbitrary File Deletion via Server-Side Validation Callback 0.4%
• CVE-2026-19861 Medium 4.7 JetFormBuilder < 3.6.5.2 - Unauthenticated Stored XSS via WYSIWYG Field in Notification Emails 0.2%
• CVE-2026-19858 High 7.5 JetFormBuilder < 3.6.5.2 - Unauthenticated Password Hash and Arbitrary Metadata Disclosure via Dynamic Preset 0.4%