Privilege Escalation Vulnerability in JetFormBuilder

WordPress

What happened

A vulnerability allows for privilege escalation in the JetFormBuilder plugin for WordPress. This affects versions up to 3.6.7.1.

Are you affected?

The JetFormBuilder plugin versions 3.6.7.1 and earlier may be affected.

What to do now

1. Upgrade to JetFormBuilder version 3.6.8 or later.
2. Review the plugin's user permissions for any unusual activity.
3. Refer to the official advisory for further details.

Sources

• cve.now/CVE-2026-119481
• CVE-2026-119481
• https://patchstack.com/database/wordpress/plugin/jetformbuilder/vulnerability/wordpress-jetformbuilder-plugin-3-6-7-1-privilege-escalation-vulnerability?_s_id=cve
• cve.now/GHSA-px6r-64ff-25cf
• GHSA-px6r-64ff-25cf
• https://nvd.nist.gov/vuln/detail/CVE-2026-119481

Data sources: cve.now, CISA KEV, GitHub Advisory Database, OSV.

This product uses data from the NVD API but is not endorsed or certified by the NVD.