CVE · Critical
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-32525 | JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.5.6.2 | Improper Control of Generation of Code ('Code Injection') | Critical 9.9 | < 3.5.6.2 | 3.5.6.2 | 2026-03-23 | — |
A vulnerability exists in JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress that allows malicious users with at least Contributor privileges to inject arbitrary commands on the hosting server. This flaw affects all versions of the plugin prior to 3.5.6.1.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.