CVE Database /
CVE-2025-64384
CVE · Medium
CVE-2025-64384 — JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.5.4
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-64384
|
JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.5.4 |
Missing Authorization |
Medium
5.3
|
< 3.5.4
|
3.5.4 |
2025-11-13 |
—
|
CVE-2025-64384
A security flaw exists within the JetFormBuilder Dynamic Blocks Form Builder plugin for WordPress, affecting all versions prior to 3.5.4. The issue arises from a lack of capability verification in certain functions, allowing unverified users to execute unintended actions without proper authorization. This vulnerability can be exploited by malicious actors who are not authenticated.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings