JetMonsters JetFormBuilder Code Injection Vulnerability Allowing Remote Code Execution

A code injection vulnerability has been identified in the JetMonsters JetFormBuilder WordPress plugin, affecting versions through 3.5.6.1. This vulnerability allows for remote code execution, enabling attackers to execute commands on the affected website, potentially leading to full control over the site.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected website, which could be used to gain backdoor access and full control of the site.

Remediation

Users of the JetFormBuilder WordPress plugin should update to version 3.5.6.2 or later. Patchstack users can enable auto-updates for vulnerable plugins.