Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

PT-2026-26882

🗓️ 21 Mar 2026 00:00:00Reported by Positive TechnologiesType 
ptsecurity
 ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

JetFormBuilder flaw allows arbitrary file read via path traversal in WordPress; weak checks enable unauthenticated exfiltration.

Related
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB		CVE-2026-4373
21 Mar 202606:45
–attackerkb
Circl		CVE-2026-4373
21 Mar 202607:30
–circl
CNNVD		WordPress plugin JetFormBuilder 安全漏洞
21 Mar 202600:00
–cnnvd
CVE		CVE-2026-4373
21 Mar 202606:45
–cve
Cvelist		CVE-2026-4373 JetFormBuilder <= 3.5.6.2 - Unauthenticated Arbitrary File Read via Media Field
21 Mar 202606:45
–cvelist
EUVD		EUVD-2026-14240
21 Mar 202609:31
–euvd
NVD		CVE-2026-4373
21 Mar 202607:16
–nvd
Patchstack		WordPress JetFormBuilder plugin <= 3.5.6.2 - Unauthenticated Arbitrary File Read via Media Field vulnerability
24 Mar 202610:43
–patchstack
RedhatCVE		CVE-2026-4373
26 Mar 202614:58
–redhatcve
Vulnrichment		CVE-2026-4373 JetFormBuilder <= 3.5.6.2 - Unauthenticated Arbitrary File Read via Media Field
21 Mar 202606:45
–vulnrichment
Rows per page
SourceLink
pluginswww.plugins.trac.wordpress.org/browser/jetformbuilder/tags/3.5.6.2/modules/block-parsers/file-uploader.php
pluginswww.plugins.trac.wordpress.org/browser/jetformbuilder/tags/3.5.6.2/modules/actions-v2/send-email/send-email-action.php
twitterwww.twitter.com/VulmonFeeds/status/2035327909171265842
twitterwww.twitter.com/CVEnew/status/2035262082128490778
nvdwww.nvd.nist.gov/vuln/detail/CVE-2026-4373
twitterwww.twitter.com/RedPacketSec/status/2035596699524026685
pluginswww.plugins.trac.wordpress.org/changeset/3486996/jetformbuilder
pluginswww.plugins.trac.wordpress.org/browser/jetformbuilder/tags/3.5.6.2/includes/classes/resources/uploaded-file.php
wordfencewww.wordfence.com/threat-intel/vulnerabilities/id/1801fd3e-d56f-4540-9700-9e9de8b465e1
twitterwww.twitter.com/VolerionSec/status/2035255140249219407
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
22 Mar 2026 00:00Current
5.9Medium risk
Vulners AI Score5.9
CVSS 3.17.5
EPSS0.00156
wordpresspath traversalarbitrary file reademail attachmentform plugin
2