Jetformbuilder
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:jetformbuilder:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Jetformbuilder (0f04428b-910c-53c4-b3c0-ea8ad4b6365a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-19859 |
vulnerable | 2026-09-16 04:34:15.513563 |
JetFormBuilder < 3.6.5.2 - Unauthenticated Arbitrary Shortcode Execution via 'status' Parameter
MEDIUM (6.5)
The JetFormBuilder WordPress plugin before 3.6.5.2 does not sanitize a request parameter before rendering it as message content, allowing unauthenticated users to execute arbitrary shortcodes registered on the site on any page displaying a form. Escaping is applied to that content before a later shortcode-expansion pass rather than after it, so the escaping can be bypassed.
Published: 2026-09-06T09:36:33.133Z
Updated: 2026-09-06T10:43:55.294Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-19862 |
vulnerable | 2026-09-16 04:34:15.427453 |
JetFormBuilder < 3.6.5.2 - Unauthenticated Email Header Injection via Send Email Action
MEDIUM (4.8)
The JetFormBuilder WordPress plugin before 3.6.5.2 does not validate or strip line breaks from address values it sources from submitted form fields before adding them to the headers of the e-mails it sends, allowing unauthenticated users to inject arbitrary e-mail headers, add hidden recipients and spoof the sender. Exploitation requires the site to be configured to take one of the message's addresses from a form field.
Published: 2026-09-06T09:36:33.798Z
Updated: 2026-09-06T10:43:40.381Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.