Vendor
high
advisory
Stored XSS in JetFormBuilder WordPress Plugin (CVE-2026-97342)
1 rule 1 TTP 1 CVEAn unauthenticated stored XSS vulnerability in the JetFormBuilder WordPress plugin allows attackers to inject arbitrary web scripts via the 'choice' Post Meta field.
JetFormBuilder — Dynamic Blocks Form Builder
web-application
wordpress
xss
1r
1t
1c
critical
advisory
Privilege Escalation in JetFormBuilder Plugin for WordPress
1 TTP 1 CVEAn unauthenticated privilege escalation vulnerability (CVE-2026-12793) in the JetFormBuilder plugin allows attackers to register arbitrary administrator accounts via improper server-side validation.
PoC
Dynamic Blocks Form Builder
wordpress
plugin
privilege-escalation
web-application
1t
1c
updated