Lucene search
+L

98 matches found

Cvelist
Cvelist
added 2025/12/16 7:21 a.m.47 views

CVE-2025-11991 JetFormBuilder <= 3.5.3 - Missing Authorization to Unauthenticated Form Generation

The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the runcallback function in all versions up to, and including, 3.5.3. This makes it possible for unauthenticated attackers to generate form...

5.3CVSS0.002EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.7 views

WordPress plugin JetFormBuilder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.6AI score0.002EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.14 views

PT-2025-51376

Name of the Vulnerable Software and Affected Versions JetFormBuilder versions up to and including 3.5.3 Description The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress has a flaw that allows unauthorized modification of data. A missing capability check on the run callback functi...

5.3CVSS6.2AI score0.002EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2025/11/29 12:35 p.m.7 views

WordPress JetFormBuilder plugin <= 3.5.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by benzdeus in WordPress Plugin JetFormBuilder versions = 3.5.3...

6.3CVSS6.7AI score0.00256EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/11/14 10:11 a.m.10 views

CVE-2025-64384

Missing Authorization vulnerability in jetmonsters JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder: from n/a through = 3.5.3...

5.3CVSS7AI score0.00256EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/13 10:15 a.m.10 views

CVE-2025-64384

Missing Authorization vulnerability in jetmonsters JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder: from n/a through = 3.5.3...

5.3CVSS0.00256EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/11/13 9:24 a.m.2 views

CVE-2025-64384 WordPress JetFormBuilder plugin <= 3.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in jetmonsters JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder: from n/a through = 3.5.3...

5.3CVSS6.6AI score0.00256EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/13 9:24 a.m.13 views

CVE-2025-64384 WordPress JetFormBuilder plugin <= 3.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in jetmonsters JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder: from n/a through = 3.5.3...

5.3CVSS0.00256EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/13 9:24 a.m.17 views

CVE-2025-64384

CVE-2025-64384 covers WordPress JetFormBuilder (JetFormBuilder — Dynamic Blocks Form Builder) with a Missing Authorization flaw affecting versions up to and including 3.5.3. Public reports describe broken access control due to misconfigured authorization; CVSS 3.1 vector: AV:N/AC:L/PR:L/UI:N/S:U/...

5.3CVSS6.6AI score0.00256EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/13 12:0 a.m.11 views

PT-2025-46817

Name of the Vulnerable Software and Affected Versions JetFormBuilder versions through 3.5.3 Description A missing authorization issue exists in JetFormBuilder, allowing exploitation of incorrectly configured access control security levels. Recommendations Update JetFormBuilder to a version later...

6.5AI score0.00256EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/11/13 12:0 a.m.5 views

WordPress plugin JetFormBuilder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.6AI score0.00256EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2023-37382

Malicious code in bioql PyPI...

8.8CVSS9AI score0.00256EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-48235

Malicious code in bioql PyPI...

7.2CVSS6.5AI score0.00525EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2023-52796

Malicious code in bioql PyPI...

5.3CVSS9.2AI score0.00373EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2025-21688

Malicious code in bioql PyPI...

7.2CVSS6.4AI score0.00467EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2023-41740

Malicious code in bioql PyPI...

7.2CVSS8.6AI score0.00762EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/07/23 12:0 a.m.4 views

WordPress JetFormBuilder Deserialization Vulnerability

WordPress JetFormBuilder is a free plugin for the WordPress platform, mainly used to quickly build all kinds of forms through a drag-and-drop interface, supporting the Gutenberg editor design. WordPress JetFormBuilder has a deserialization vulnerability that stems from deserializing untrustworthy...

7.2CVSS7.1AI score0.00467EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/18 10:59 a.m.7 views

CVE-2025-53990

Deserialization of Untrusted Data vulnerability in jetmonsters JetFormBuilder jetformbuilder allows Object Injection.This issue affects JetFormBuilder: from n/a through = 3.5.1.2...

7.2CVSS5.9AI score0.00467EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/07/16 12:10 p.m.7 views

WordPress JetFormBuilder plugin <= 3.5.1.2 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Que Thanh Tuan Blue Rock in WordPress Plugin JetFormBuilder versions = 3.5.1.2...

7.2CVSS6.9AI score0.00467EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/07/16 11:15 a.m.5 views

CVE-2025-53990

Deserialization of Untrusted Data vulnerability in jetmonsters JetFormBuilder jetformbuilder allows Object Injection.This issue affects JetFormBuilder: from n/a through = 3.5.1.2...

7.2CVSS0.00467EPSS
SaveExploits0References1
Rows per page
Query Builder