CVE Database /
CVE-2023-37866
CVE · High
CVE-2023-37866 — JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.0.9
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-37866
|
JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.0.9 |
Improper Privilege Management |
High
7.2
|
< 3.0.9
|
3.0.9 |
2023-07-10 |
—
|
CVE-2023-37866
The JetFormBuilder plugin before version 3.0.9 contains a privilege escalation vulnerability that permits attackers with low-level account access to elevate their privileges to higher permission levels, potentially enabling complete website compromise. Discovered and reported by Rafie Muhammad, this flaw was resolved in version 3.0.9 and administrators should update to this release or later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings