JetFormBuilder
jetmonsters
Developer
3.6.5.3
Latest version
80,000
Installations
No date
Last updated
Vulnerability history
0 present
20 patched
9 Mitigation rules
- Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter<= 3.6.213 hours ago
- Unauthenticated Arbitrary Shortcode Execution vulnerability< 3.6.5.27 days ago
- Cross Site Scripting (XSS) vulnerability<= 3.6.5.107/09/2026
- Unauthenticated Stored XSS vulnerability< 3.6.5.207/09/2026
- Unauthenticated Password Hash and Arbitrary Metadata Disclosure vulnerability< 3.6.5.207/09/2026
- Unauthenticated Email Header Injection vulnerability< 3.6.5.206/09/2026
- Missing Authorization to Unauthenticated JetEngine Options Page Modification vulnerability<= 3.6.203/09/2026
- Broken Access Control vulnerability<= 3.6.4.104/08/2026
- Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability<= 3.6.301/07/2026
- Privilege Escalation vulnerability<= 3.6.116/06/2026
- Cross Site Scripting (XSS) vulnerability<= 3.6.0.116/06/2026
- Unauthenticated Arbitrary File Read via Media Field vulnerability<= 3.5.6.224/03/2026
- Remote Code Execution (RCE) vulnerability<= 3.5.6.123/03/2026
- Missing Authorization to Unauthenticated Form Generation vulnerability<= 3.5.331/12/2025
- Broken Access Control vulnerability<= 3.5.329/11/2025
- PHP Object Injection Vulnerability<= 3.5.1.216/07/2025
- Authenticated (Administrator+) Privilege Escalation vulnerability<= 3.3.4.105/08/2024
- Content Injection vulnerability<= 3.1.428/11/2023
- Authenticated Privilege Escalation vulnerability<= 3.0.810/07/2023
- Cross Site Request Forgery (CSRF) vulnerability<= 3.0.622/05/2023
