{"vulnerability": "CVE-2026-12793", "sightings": [{"uuid": "0c08df83-5f76-4fc2-a0c4-acdaa2f54cdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12793", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvmck7gbh724", "content": "JetFormBuilder Dynamic Blocks Form Builder (<=3.6.2) has a CRITICAL privilege escalation (CVE-2026-12793). Unauthenticated attackers can gain admin rights. Restrict access & monitor. Patch status pending. https://radar.offseq.com/threat/cve-2026-12793-cwe-269-improper-privilege-management-in-jetm...", "creation_timestamp": "2026-09-16T04:30:27.484386Z"}, {"uuid": "8e003d01-f3ed-482d-9301-be700d44df97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvmedqhuks2m", "content": "Daily IT Security Digest \u2014 2026-09-16\nusers should check vendor advisories and implement compensating controls.\nSource: [OffSeq](https://infosec.exchange/@offseq/117278482410349827)\n\n## 6. JetFormBuilder Critical Privilege Escalation \u2014 Unauthenticated Admin Account Creation\n\nCVE-2026-12793 in", "creation_timestamp": "2026-09-16T05:02:44.697218Z"}, {"uuid": "98597ed3-7f59-4822-b7a1-45cd153165d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvmhxebt6o2b", "content": "\ud83d\udea8 CVE-2026-12793 \u2014 CVSS 9.8 CRITICAL\n\nThe JetFormBuilder \u2014 Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Privilege Escalation...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-12793\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T06:07:17.174624Z"}, {"uuid": "9d8b5a8d-ab3e-4dd5-8490-8005eb5465be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvms67uytn25", "content": "CVE-2026-12793 - jetformbuilder \u2014 dynamic blocks form builder\nThe JetFormBuilder form plugin for WordPress can be tricked into giving a stranger full admin rights. An attacker can send a specially crafted request\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jetmonsters #CVE #infosec", "creation_timestamp": "2026-09-16T09:10:04.639711Z"}, {"uuid": "70139a03-ce97-46c6-9944-07309bd707ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mvmxiahtuc2t", "content": "\u3010\u7dca\u6025\u3011WordPress\u30d7\u30e9\u30b0\u30a4\u30f3 JetFormBuilder \u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff08CVE-2026-12793 / CVSS v3.1 9.8 CRITICAL\uff09\n\n\u8a8d\u8a3c\u3092\u901a\u3089\u305a\u306b\u7ba1\u7406\u8005\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u4f5c\u6210\u3067\u304d\u307e\u3059\u3002\u6709\u52b9\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u306f\u7d048\u4e07\u4ef6\u3002\n\u5bfe\u51e6: 3.6.5.3\u3078\u66f4\u65b0\u3002\u672cCVE\u306f3.6.2.1\u3067\u4fee\u6b63\u6e08\u307f\u3067\u3059\u304c\u30019\u6708\u306e\u4ed65\u4ef6\u304c3.6.5.2\u307e\u3067\u304b\u304b\u308b\u305f\u3081\u3001\u9014\u4e2d\u3067\u6b62\u3081\u306a\u3044\u3067\u304f\u3060\u3055\u3044\u3002\n\nforsmile.jp/articles/jet...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "creation_timestamp": "2026-09-16T10:45:10.537416Z"}, {"uuid": "9b3c9455-a35c-492c-adb1-ec2559f0a7dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12793", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117281561601330136", "content": "\ud83d\udcf0 Critical WordPress Plugin Flaw Allows Unauthenticated Admin Creation\nCritical unauthenticated admin creation flaw (CVE-2026-12793, CVSS 9.8) found in JetFormBuilder WordPress plugin (<= 3.6.2). Public exploit available. Update or disable immediately to prevent site takeover! #WordPress #Vulnerability\n\ud83d\udd17 https://cyber.netsecops.io/articles/wordpress-jetformbuilder-plugin-flaw-cve-2026-12793-allows-admin-takeover/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-16T16:03:32.206530Z"}, {"uuid": "39a53065-5a3a-4ab4-b986-bb512f40cd2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvnjcld6vu2q", "content": "Critical unauthenticated admin creation flaw (CVE-2026-12793, CVSS 9.8) found in JetFormBuilder WordPress plugin (<= 3.6.2). Public exploit available. Update or disable immediately to prevent site takeover! #WordPress #Vulnerability\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-16T16:04:07.459694Z"}, {"uuid": "4f43f028-c268-4dfa-8b46-8a2f98ef37a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102495", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12793\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-16 14:44:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12793 PoC \u2014 JetFormBuilder \u22643.6.2 unauth Register User / admin account creation\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-16T19:00:04.925226Z"}, {"uuid": "f5601d68-401b-4230-b90f-8f6620fada02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102495", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12793\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-16 14:44:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12793 PoC \u2014 JetFormBuilder \u22643.6.2 unauth Register User / admin account creation\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-17T01:00:03.250305Z"}, {"uuid": "d5bdb306-31ef-41f4-bfa3-7ff353e950fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102530", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12793\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abraxas\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-17 03:54:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12793 - JetFormBuilder Unauthorized RCE (CRITICAL 9.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-17T06:00:04.345578Z"}, {"uuid": "321a8e7a-17b7-4968-9135-4ad14d57d632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102530", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12793\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abraxas\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-17 03:54:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12793 - JetFormBuilder Unauthorized RCE (CRITICAL 9.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-18T00:00:09.828663Z"}, {"uuid": "f10ad59d-9300-4831-bbfc-282ff721d925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "seen", "source": "Telegram/Ur2Bn3bfhoLALRYtf_QQeiLvx6zF_jjvHXFzOmQHfaPkXXY", "content": "", "creation_timestamp": "2026-09-18T04:00:06.365162Z"}, {"uuid": "59a59c05-a21c-4e0a-af3b-f39bbb94db31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "seen", "source": "Telegram/c5SreYmrDkdJR1r3a8RFt1SI3OPNA8AQ129hesIQxK_5L6E", "content": "", "creation_timestamp": "2026-09-18T04:00:08.588948Z"}, {"uuid": "a6b0aa9c-00ae-4d79-a56f-49fe473ac387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12793", "type": "seen", "source": "Telegram/YI-zyM6R2SXtebw0qilHuE_bC29iP0vy8Cn8zxh5ugjaAgA", "content": "", "creation_timestamp": "2026-09-18T04:00:09.646062Z"}]}