Advisories · Technology

Crocoblock JetFormBuilder.

Every CVE that names Crocoblock JetFormBuilder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-119481 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability
- Crocoblock JetFormBuilder
- Privilege escalation
Not analysed yet 4 Nov 2026
CVE-2026-119480 CVE record

CVSS 6.5 Medium

WordPress JetFormBuilder plugin <= 3.6.7.1 - Attachment Deletion Via Media-Field Preset vulnerability
- Crocoblock JetFormBuilder
- Path traversal
Not analysed yet 1 Nov 2026
CVE-2026-119479 CVE record

CVSS 5.3 Medium

WordPress JetFormBuilder plugin <= 3.6.7.1 - Content Injection vulnerability
- Crocoblock JetFormBuilder
- Cross-site scripting (XSS)
Not analysed yet 30 Oct 2026
CVE-2026-119482 CVE record

CVSS 5.3 Medium

WordPress JetFormBuilder plugin <= 3.6.7.1 - Broken Access Control vulnerability
- Crocoblock JetFormBuilder
- Broken access control
Not analysed yet 30 Oct 2026
CVE-2026-107431 CVE record

CVSS 7.5 High

WordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerability
- Crocoblock JetFormBuilder
- Broken access control
Not analysed yet 14 Oct 2026
CVE-2026-84817 CVE record

CVSS 7.1 High

WordPress JetFormBuilder plugin <= 3.6.5.1 - Cross Site Scripting (XSS) vulnerability
- Crocoblock JetFormBuilder
- Cross-site scripting (XSS)
Not analysed yet 8 Sept 2026
CVE-2023-37866 CVE record

CVSS 7.2 High

WordPress JetFormBuilder plugin <= 3.0.8 - Authenticated Privilege Escalation vulnerability
- Crocoblock JetFormBuilder
- Privilege escalation
Not analysed yet 17 May 2024
CVE-2023-48763 CVE record

CVSS 5.3 Medium

WordPress JetFormBuilder plugin <= 3.1.4 - Content Injection vulnerability
- Crocoblock JetFormBuilder
- Cross-site scripting (XSS)
Not analysed yet 24 Apr 2024