Jetmonsters vulnerabilities
64 published CVEs name Jetmonsters among the affected products.
- 64Published CVEs64 of them scored
- 35Last 12 monthspublished in the last year
- 5Critical16 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-121977
JetFormBuilder <= 3.6.8 - Unauthenticated Stored Cross-Site Scripting via Dynamic Value Block `to_set` Property
jetmonsters · JetFormBuilder — Dynamic Blocks Form Builder
Medium5.4 - CVE-2026-111317
JetFormBuilder <= 3.6.7 - Unauthenticated Stored Cross-Site Scripting via Form Record Preset Source
jetmonsters · JetFormBuilder — Dynamic Blocks Form Builder
High7.2 - CVE-2026-119183
JetFormBuilder <= 3.6.8 - Unauthenticated Stored Cross-Site Scripting via '%META::key%' Macro via Post Meta
jetmonsters · JetFormBuilder — Dynamic Blocks Form Builder
High7.2 - CVE-2026-120741
MotoPress Appointment Booking <= 2.4.8 - Unauthenticated Stored Cross-Site Scripting via Customer Name via /customers/create REST Endpoint
jetmonsters · MotoPress Appointment Booking
Medium5.4 - CVE-2026-120561
JetFormBuilder <= 3.6.2 - Missing Authorization to Unauthenticated JetEngine Options Page Modification
jetmonsters · JetFormBuilder — Dynamic Blocks Form Builder
Medium5.3 - CVE-2026-103912
JetFormBuilder <= 3.6.6 - Reflected DOM-Based Cross-Site Scripting via 'query_var' Dynamic Preset via data-jfb-macro / JFB_FIELD:: Macro Renderer
jetmonsters · JetFormBuilder — Dynamic Blocks Form Builder
Medium4.7 - CVE-2026-91862
Getwid <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-image-points'
jetmonsters · Getwid – Gutenberg Blocks
Medium6.4 - CVE-2026-97342
JetFormBuilder <= 3.6.5.4 - Unauthenticated Stored Cross-Site Scripting via 'choice' Post Meta via Insert/Update Post Action
jetmonsters · JetFormBuilder — Dynamic Blocks Form Builder
High7.2 - CVE-2026-102391
WordPress JetFormBuilder plugin <= 3.6.5.4 - Cross Site Scripting (XSS) vulnerability
jetmonsters · JetFormBuilder
High7.1 - CVE-2026-96568
Restaurant Menu and Food Ordering <= 2.4.14 - Unauthenticated Stored Cross-Site Scripting via 'phone_number' Parameter
jetmonsters · Restaurant Menu and Food Ordering
High7.2