JetFormBuilder
jetmonsters
Developer
3.6.6.1
Latest version
80,000
Installations
No date
Last updated
Vulnerability history
0 present
24 patched
11 Mitigation rules
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 3.6.5.47 days ago
- Cross Site Scripting (XSS) vulnerability<= 3.6.5.430/09/2026
- Reflected Cross-Site Scripting vulnerability<= 3.6.5.325/09/2026
- Admin+ Arbitrary File Deletion vulnerability3.5.6.2-3.6.5.219/09/2026
- Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter<= 3.6.215/09/2026
- Unauthenticated Arbitrary Shortcode Execution vulnerability< 3.6.5.208/09/2026
- Cross Site Scripting (XSS) vulnerability<= 3.6.5.107/09/2026
- Unauthenticated Stored XSS vulnerability< 3.6.5.207/09/2026
- Unauthenticated Password Hash and Arbitrary Metadata Disclosure vulnerability< 3.6.5.207/09/2026
- Unauthenticated Email Header Injection vulnerability< 3.6.5.206/09/2026
- Missing Authorization to Unauthenticated JetEngine Options Page Modification vulnerability<= 3.6.203/09/2026
- Broken Access Control vulnerability<= 3.6.4.104/08/2026
- Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability<= 3.6.301/07/2026
- Privilege Escalation vulnerability<= 3.6.116/06/2026
- Cross Site Scripting (XSS) vulnerability<= 3.6.0.116/06/2026
- Unauthenticated Arbitrary File Read via Media Field vulnerability<= 3.5.6.224/03/2026
- Remote Code Execution (RCE) vulnerability<= 3.5.6.123/03/2026
- Missing Authorization to Unauthenticated Form Generation vulnerability<= 3.5.331/12/2025
- Broken Access Control vulnerability<= 3.5.329/11/2025
- PHP Object Injection Vulnerability<= 3.5.1.216/07/2025
- Authenticated (Administrator+) Privilege Escalation vulnerability<= 3.3.4.105/08/2024
- Content Injection vulnerability<= 3.1.428/11/2023
- Authenticated Privilege Escalation vulnerability<= 3.0.810/07/2023
- Cross Site Request Forgery (CSRF) vulnerability<= 3.0.622/05/2023