Skip to content

CVE-2026-12793

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
September 16, 2026
Last Seen
September 17, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Privilege Escalation Vulnerability in JetFormBuilder Plugin67.5

The JetFormBuilder plugin for WordPress is vulnerable to a privilege escalation flaw (CVE-2026-12793) affecting all versions up to 3.6.2. The vulnerability allows unauthenticated attackers to create administrator-level accounts by exploiting improper validation of form IDs. Attackers can send crafte...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Privilege EscalationCWE-269 - Improper Privilege ManagementT1136 - Create AccountT1068 - Exploitation for Privilege EscalationWordPressJetFormBuilderPHPPoc.py