J
Vendor security profile
jetmonsters
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs12
Critical1
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS7.0
12-month vulnerability rate
0
0
0
0
0
0
0
1
0
2
6
3
CVE KEV
CVE severity distribution
12toplam CVE
Critical1 (8%)
High6 (50%)
Medium5 (42%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
12Unknown
Latest vulnerabilities
4.7
CVE-2026-103912
JetFormBuilder <= 3.6.6 - Reflected DOM-Based Cross-Site Scripting via 'query_var' Dynamic Preset via data-jfb-macro / JFB_FIELD:: Macro Renderer
J
Patch status unknownEPSS %0
6.4
CVE-2026-91862
Getwid <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-image-points'
J
Patch status unknownEPSS %0
7.2
CVE-2026-97342
JetFormBuilder <= 3.6.5.4 - Unauthenticated Stored Cross-Site Scripting via 'choice' Post Meta via Insert/Update Post Action
J
Patch status unknownEPSS %0
7.1
CVE-2026-102391
WordPress JetFormBuilder plugin <= 3.6.5.4 - Cross Site Scripting (XSS) vulnerability
J
Patch status unknownEPSS %0
7.2
CVE-2026-96568
Restaurant Menu and Food Ordering <= 2.4.14 - Unauthenticated Stored Cross-Site Scripting via 'phone_number' Parameter
J
Patch status unknownEPSS %0
6.1
CVE-2026-92212
JetFormBuilder <= 3.6.5.3 - Reflected Cross-Site Scripting via 'jfb_xss' (URL Query Variable) Parameter via Calculated Field
J
Patch status unknownEPSS %0
6.4
CVE-2026-5924
Getwid <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Google Maps 'customStyle'
J
Patch status unknownEPSS %0
9.8
CVE-2026-12793
JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter
J
Patch status unknownEPSS %1
7.2
CVE-2026-90650
MotoPress Hotel Booking <= 6.2.4 - Unauthenticated Stored Cross-Site Scripting via Stripe Webhook Event Object 'id'
J
Patch status unknownEPSS %0
8.1
CVE-2026-73400
WordPress Restaurant Menu by MotoPress plugin <= 2.4.11 - Local File Inclusion vulnerability
J
Patch status unknownEPSS %0