Skip to content
Threat Feed
Subscribe

Vendor

JetFormBuilder

1 brief RSS
critical advisory

Privilege Escalation in JetFormBuilder Plugin for WordPress

An unauthenticated privilege escalation vulnerability (CVE-2026-12793) in the JetFormBuilder plugin allows attackers to register arbitrary administrator accounts via improper server-side validation.

PoC Dynamic Blocks Form Builder wordpress plugin privilege-escalation web-application
1t 1c updated