PostCVE-2026-12793 – JetFormBuilder WordPress Plugin 🆘

17 September 2026

Root Access Club

Photo
click to show

CVE-2026-12793 – JetFormBuilder WordPress Plugin 🆘 Critical vulnerability (CVSS 9.8) ⚠️ Affects versions ≤ 3.6.2 Unauthenticated privilege escalation Fixed in version 3.6.2.1 and later ✅ Attack Flow : 1⃣ Detect JetFormBuilder + version ≤ 3.6.2 (readme.txt) 2⃣ Discover form ID from public pages (data-form-id, /register/, etc.) 4⃣ POST to referer page with ?jet_form_builder_submit=submit&method=ajax 4⃣ Register User action runs → new WP user created If you're using this plugin, update immediately ‼️ GitHub ⛓‍💥 @RootAccessClub

2 · 157 · 04:55

Nearby in the feed

Root Access Club21:05Claude Red 🌪 Offensive security skills for Claude a collection of "SKILL.md" files designed to turn Claude into a more context aware red team assistant Covers a R

Root Access Club21:03XSS Labs🔬 An intentionally vulnerable lab environment for practicing XSS across different contexts, including Reflected, Stored, DOM-based, and JavaScript based

this message

Root Access Club17:34OWASP Amass 🔎 An open source framework for network mapping and attack surface discovery • Subdomain & DNS enumeration • OSINT-based asset discovery • Infrastruc R

Root Access Club11:27Legion — Automated Network Pentesting 🛡️ Legion is a GUI based network penetration testing framework built to automate reconnaissance, scanning, service enumera