CVE-2026-19859 | JetFormBuilder Plugin 3.6.0 on WordPress Shortcode injection

September 6, 2026 Yanac

A vulnerability labeled as critical has been found in JetFormBuilder Plugin 3.6.0 on WordPress. This vulnerability affects unknown code of the component Shortcode Handler. The manipulation results in injection.

This vulnerability is reported as CVE-2026-19859. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More