Now officially on WordPress.org

CVE Database / CVE-2025-53990

CVE · High

CVE-2025-53990 — JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.5.2

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-53990 JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.5.2 Deserialization of Untrusted Data High 7.2 < 3.5.2 3.5.2 2025-07-16 —

CVE-2025-53990

The JetFormBuilder WordPress plugin has a security flaw that allows attackers with admin access and higher to inject malicious PHP objects through unverified input in versions up to 3.5.1.2. This vulnerability can be exploited by deserialization of unauthorized data, potentially enabling the attacker to execute code or delete files at will.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings