CVE-2026-119481: WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability
Published Nov 4, 2026
·Updated
Incorrect Privilege Assignment vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Privilege Escalation.This issue affects JetFormBuilder: from n/a through 3.6.7.1.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress JetFormBuilderto a version that resolves this vulnerability.Fixed in 3.6.8
Event History
Nov 4, 2026
CVE Published
via MITRE·12:08 PM
Data Sourced
via MITRE·12:08 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Can this be exploited remotely without an account or user interaction?
The CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
2
What security impact is indicated?
The CVSS metrics indicate high impact to confidentiality, integrity, and availability, with the vulnerable component's security scope unchanged.