CVE-2026-19858

JetFormBuilder — Dynamic Blocks Form Builder , a WordPress plugin, versions before 3.6.5.2 fail to perform authorisation checks when resolving request-derived data during page rendering via Dynamic Preset . This allows unauthenticated users to read arbitrary user, post, and term properties and me...