Live › vulnerability › CVE-2026-119480
JetFormBuilder, a WordPress form plugin from Crocoblock, has a path traversal flaw that lets a request reach files outside the intended directory. The sources do not say which files an attacker can read or write.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-01 16:20 UTC. All times on this page are UTC.
JetFormBuilder installations at version 3.6.7.1 or earlier are described as affected; the sources do not say which configuration or request path is needed. unknown for further detail.
No product ranges from the sources yet.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Path Traversal.This issue affects JetFormBuilder: from n/a through 3.6.7.1.
This page as .md · .json · in your agent: get_signal("CVE-2026-119480")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.