Patch Ticker

JetFormBuilder plugin privilege escalation flaw

A website form plugin can let attackers seize admin rights!

Summary

Incorrect privilege assignment in the WordPress form plugin JetFormBuilder lets an attacker raise their privileges. Versions through 3.6.7.1 are affected.

What to do

Update to 3.6.8 or later.

Products and platforms

  • Crocoblock JetFormBuilder

CVE IDs

Sources

Times

First published

First seen