Zero Day MonitorZDM

← Back to list

7.5

CVE-2026-28140

jetmonsters · jetformbuilder

WordPress JetFormBuilder plugin <= 3.6.4.1 - Broken Access Control vulnerability

Description

Unauthenticated Broken Access Control in JetFormBuilder <= 3.6.4.1 versions.

Affected Products

Vendor	Product	Versions
jetmonsters	jetformbuilder	n/a

References

https://patchstack.com/database/wordpress/plugin/jetformbuilder/vulnerability/wordpress-jetformbuilder-plugin-3-6-4-1-broken-access-control-vulnerability?_s_id=cve(vdb-entry)

Related News (1 articles)

Tier C

VulDB17d ago

CVE-2026-28140 | JetMonsters JetFormBuilder Plugin up to 3.6.4.1 on WordPress access control

→ No new info (linked only)

CVSS 3.17.5 HIGH

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CISA KEV❌ No

Actively exploited❌ No

CWECWE-862

PublishedAug 6, 2026

Trending Score5

Source articles1

Independent1

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-73400EXPKEV

WordPress Restaurant Menu by MotoPress plugin <= 2.4.11 - Local File Inclusion vulnerability

CRITICALCVE-2026-13454EXP

MotoPress Appointment Booking <= 2.4.5 - Authenticated (Staff+) SQL Injection via 's' Parameter

MEDIUMCVE-2026-57347EXP

WordPress Hotel Booking Lite plugin <= 6.0.3 - Sensitive Data Exposure vulnerability

HIGHCVE-2026-57644EXP

WordPress Restaurant Menu by MotoPress plugin <= 2.4.10 - SQL Injection vulnerability

MEDIUMCVE-2025-63078

WordPress Restaurant Menu by MotoPress plugin <= 2.4.11 - Broken Access Control vulnerability

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Aug 6, 2026

Discovered by ZDM

Aug 6, 2026