CVE-2026-28140

JetFormBuilder versions up to 3.6.4.1 are susceptible to unauthenticated broken access control vulnerabilities, allowing attackers to gain unauthorized access to sensitive functionalities or data. This high-severity flaw poses a significant risk to any organization utilizing affected versions, particularly those handling sensitive information or critical operations. Users of JetFormBuilder should prioritize immediate updates or mitigations to safeguard against potential exploitation.