CVE-2026-123861

MEDIUM 5.3CVE-2026-123861 · Published 07/11/2026 · updated 07/11/2026

In short

CVE-2026-123861 is a MEDIUM (CVSS 5.3) vulnerability.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Authorization Bypass Through User-Controlled Key vulnerability in CrocoBlock JetFormBuilder – Hierarchical Select jet-form-builder-hierarchical-select allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder – Hierarchical Select: from n/a through 1.0.10.

References

patchstack.com/database/wordpress/plugin/jet-form-builder-hierarchical-select/vulnerability/wordpress-jetformbuilder-hierarchical-select-plugin-1-0-10-insecure-direct-object-references-idor-vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free