PLUGIN SECURITY
Is Jetformbuilder safe?
Advanced form builder plugin for Gutenberg. Create forms from the ground up, customize the existing ones, and style them up – all in one editor.
What this plugin does
- Slug:
jetformbuilder - Author: jetmonsters
- 80000+ active installs
- 82/100 rating (70 reviews on wordpress.org)
- 2105867 all-time downloads
- On WordPress.org since 2021-01-25
blockscontact formform builderformsgutenberg
Maintenance status
- Latest known version: 3.6.5
- Last updated: 2026-09-02 12:46pm GMT
- Tested up to WordPress: 7.0.4
- Requires PHP: 7.0+
Known vulnerabilities
13 known CVEs on file for Jetformbuilder.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-13459 | JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.6.3.1 | Missing Authorization | Medium 5.3 | < 3.6.3.1 | 3.6.3.1 | 2026-07-01 | ✓ fixed in latest |
| CVE-2026-28140 | JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.6.4.2 | Missing Authorization | High 7.5 | < 3.6.4.2 | 3.6.4.2 | 2026-07-01 | ✓ fixed in latest |
| CVE-2026-54196 | JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.6.1.1 | Incorrect Privilege Assignment | Medium 6.8 | < 3.6.1.1 | 3.6.1.1 | 2026-06-16 | ✓ fixed in latest |
| CVE-2026-54195 | JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.6.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.1 | < 3.6.1 | 3.6.1 | 2026-06-16 | ✓ fixed in latest |
| CVE-2026-32525 | JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.5.6.2 | Improper Control of Generation of Code ('Code Injection') | Critical 9.9 | < 3.5.6.2 | 3.5.6.2 | 2026-03-23 | ✓ fixed in latest |
| CVE-2025-11991 | JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.5.4 | Missing Authorization | Medium 5.3 | < 3.5.4 | 3.5.4 | 2025-12-15 | ✓ fixed in latest |
| CVE-2025-64384 | JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.5.4 | Missing Authorization | Medium 5.3 | < 3.5.4 | 3.5.4 | 2025-11-13 | ✓ fixed in latest |
| CVE-2025-53990 | JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.5.2 | Deserialization of Untrusted Data | High 7.2 | < 3.5.2 | 3.5.2 | 2025-07-16 | ✓ fixed in latest |
+ 6 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-7291 | JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.3.4.2 | Improper Privilege Management | High 7.2 | < 3.3.4.2 | 3.3.4.2 | 2024-08-02 | ✓ fixed in latest |
| CVE-2023-48763 | JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.1.5 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | Medium 5.3 | < 3.1.5 | 3.1.5 | 2023-11-28 | ✓ fixed in latest |
| CVE-2023-37866 | JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.0.9 | Improper Privilege Management | High 7.2 | < 3.0.9 | 3.0.9 | 2023-07-10 | ✓ fixed in latest |
| CVE-2023-33212 | JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.0.7 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 3.0.7 | 3.0.7 | 2023-05-22 | ✓ fixed in latest |
| — | JetFormBuilder — Dynamic Blocks Form Builder [jetformbuilder] < 3.5.6.3 | — | Unknown | < 3.5.6.3 | 3.5.6.3 | 0000-00-00 | ✓ fixed in latest |
| CVE-2026-4373 | JetFormBuilder < 3.5.6.3 - Unauthenticated Arbitrary File Read via Media Field | — | Unknown | < 3.5.6.3 | 3.5.6.3 | — | ✓ fixed in latest |
How to fix it
Keep Jetformbuilder updated — 3.6.5 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Contact Form 7 — 10000000+ active installs — 80/100 (2179) — max PHP 8.4
- Akismet Anti-spam: Spam Protection — 5000000+ active installs — 94/100 (1186) — max PHP 8.4
- WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More — 5000000+ active installs — 96/100 (14371)
- Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder — 700000+ active installs — 96/100 (791)
- Forminator Forms – Contact Form, Payment Form & Custom Form Builder — 600000+ active installs — 96/100 (2120)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.