{"affected":[],"cveId":"CVE-2026-119480","cwes":["CWE-22"],"description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Path Traversal.This issue affects JetFormBuilder: from n/a through 3.6.7.1.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.5,"severity":"medium","source":"NVD: audit@patchstack.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1793557032887,"publishedAt":1793549893513,"references":[{"source":"audit@patchstack.com","tags":[],"url":"https://patchstack.com/database/wordpress/plugin/jetformbuilder/vulnerability/wordpress-jetformbuilder-plugin-3-6-7-1-arbitrary-file-deletion-vulnerability?_s_id=cve"}],"remediation":[],"revision":"128a17e058f9af26f3047c68b807f019faeb9a65b9c93133a495bfc6eaff1d73","sources":[{"modifiedAt":1793557032887,"name":"NVD","retrievedAt":1793578576434,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119480"}],"ssvc":{"assessedAt":1793553736500,"automatable":"no","exploitation":"none","source":"NVD SSVC: 134c704f-9b21-4f2e-91b3-4a467353bcc0","technicalImpact":"partial"},"status":"published","title":"CVE-2026-119480","updatedAt":1793578576434}