CVE-2026-120561 | Jetmonsters JetFormBuilder Plugin up to 3.6.2 on WordPress Update_Options do_action improper authorization

November 3, 2026 Yanac

A vulnerability has been found in Jetmonsters JetFormBuilder Plugin up to 3.6.2 on WordPress and classified as problematic. Affected by this issue is the function do_action of the component Update_Options. Performing a manipulation results in improper authorization.

This vulnerability is reported as CVE-2026-120561. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More