Crocoblock Jetformbuilder vulnerabilities

• crocoblock jetformbuilder WordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerability CVE-2026-123860 5.3 MediumNovember 7, 2026
• crocoblock jetformbuilder – hierarchical select WordPress JetFormBuilder – Hierarchical Select plugin <= 1.0.10 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-123861 5.3 MediumNovember 7, 2026
• crocoblock jetformbuilder WordPress JetFormBuilder plugin <= 3.6.8 - Content Injection vulnerability CVE-2026-123483 5.3 MediumNovember 7, 2026
• crocoblock jetformbuilder WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability CVE-2026-119481 9.8 CriticalNovember 4, 2026
• crocoblock jetformbuilder WordPress JetFormBuilder plugin <= 3.6.7.1 - Attachment Deletion Via Media-Field Preset vulnerability CVE-2026-119480 6.5 MediumNovember 1, 2026
• crocoblock jetformbuilder WordPress JetFormBuilder plugin <= 3.6.7.1 - Content Injection vulnerability CVE-2026-119479 5.3 MediumOctober 30, 2026
• crocoblock jetformbuilder WordPress JetFormBuilder plugin <= 3.6.7.1 - Broken Access Control vulnerability CVE-2026-119482 5.3 MediumOctober 30, 2026
• crocoblock jetformbuilder WordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerability CVE-2026-107431 7.5 HighOctober 14, 2026
• crocoblock jetformbuilder WordPress JetFormBuilder plugin <= 3.6.5.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-84817 7.1 HighSeptember 8, 2026
• crocoblock jetformbuilder WordPress JetFormBuilder plugin <= 3.0.8 - Authenticated Privilege Escalation vulnerability CVE-2023-37866 7.2 HighMay 17, 2024
• crocoblock jetformbuilder WordPress JetFormBuilder plugin <= 3.1.4 - Content Injection vulnerability CVE-2023-48763 5.3 MediumApril 24, 2024
• crocoblock jetformbuilder, jetformbuilder — dynamic blocks form builder +1 more WordPress JetFormBuilder Plugin <= 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-33212 4.3 MediumMay 28, 2023