7.5
High
CVE-2026-107431 Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured…
Description
Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder: from n/a through 3.6.6.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| JetFormBuilder 3.6 | earliest → 3.6.6 | No fix stated |
Other CVEs of JetFormBuilder
The 8 CVEs of JetFormBuilder →
CVE-2026-119481
WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability
9.8
Critical
CVE-2026-119480
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock…
6.5
Medium
CVE-2026-119479
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Crocoblock JetFormBuilder…
5.3
Medium
CVE-2026-119482
Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured…
5.3
Medium