CVE-2026-120561

The JetFormBuilder plugin for WordPress (all versions up to and including 3.6.2 ) is vulnerable to unauthorized data modification due to a missing capability check on the do_action function within the Update_Options action class. This flaw allows unauthenticated attackers to modify JetEngine Opti...