7.5
High
CVE-2026-107431 Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured…
Description
Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder: from n/a through 3.6.6.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| JetFormBuilder 3.6 | earliest → 3.6.6 | No fix stated |
Other CVEs of JetFormBuilder
The 10 CVEs of JetFormBuilder →
CVE-2026-123860
WordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerability
5.3
Medium
CVE-2026-123483
WordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerability
5.3
Medium
CVE-2026-119481
WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability
9.8
Critical
CVE-2026-119480
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock…
6.5
Medium