CVE-2026-12793PoC

MEDIUMCVSS 9.8 · CRITICAL

Exploit discussion active in current signal (3 latest mentions)

Immediate actions

Patch affected systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.6.2. This is due to the plugin not validating that a submitted form ID belongs to a JetFormBuilder form before parsing the referenced post's content as form schema and executing an Advanced Validation server-side callback. This makes it possible for unauthenticated attackers to create a new administrator-level user account.

Back to dashboard

4.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-269

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Public PoC and exploit tooling are both present
Patch or workaround signal is available
10 mentions across 3 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 3 signals
PoC mentioned or linked in 7 signals
Patch or workaround mentioned in 1 signal
Technical details provided in 4 signals
Disclosure: 3 classified signals
Peaked 1d ago at 6 mentions (2026-09-17); latest day: 3
10 total mentions across 3 days

Deep dive

Activity timeline10 mentions / 3d

Signal classification3 categories

PoC

550.0%

Disclosure

330.0%

Exploit

220.0%

Referenced assets7 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-16	1	Exploit1
2026-09-17	6	Disclosure3Exploit1PoC2
2026-09-18	3	PoC3

Full discourse10 posts

Ryx@PadhiyarRushi44d
PoC
JetFormBuilder unauthenticated RCE PoC surfaced!! CVE-2026-12793 (CVSS 9.8): unauthorized remote code execution / admin account creation path in JetFormBuilder ≤3.6.2. Public PoC repositories are already indexed. https://github.com/murrez/CVE-2026-12793 #Cybersecurity #AI #AISecurity #MCP #Claude #GPT #Infosec #Trending #WordPress #RCE
Post summary
The tweet announces the release of a public Proof of Concept for CVE-2026-12793, a critical RCE vulnerability in JetFormBuilder, and provides a link to the PoC repository.
3501871.3K
954 followersView on X
Rıdvan Yağlı@ridvanyagli46d
Exploit
🔴 WordPress JetFormBuilder eklentisinde CVE-2026-12793 (CVSS 9.8) için PoC yayınlandı! Kimlik doğrulama gerektirmeyen açık, özel hazırlanmış AJAX istekleriyle yeni kullanıcı hesabı oluşturulmasına; form yönetici yetkisiyle yapılandırılmışsa admin hesabı oluşturularak sitenin ele geçirilmesine yol açabiliyor. PoC; otomatik tarama ve exploit modları içeriyor. Eklentiyi 3.6.2.1+ sürümüne güncelleyin. https://github.com/murrez/CVE-2026-12793
Post summary
A Proof of Concept for CVE-2026-12793 in WordPress JetFormBuilder plugin has been published on GitHub with automated scanning and exploit capabilities, enabling unauthenticated remote attackers to create user accounts and potentially take over websites.
1101361.0K
2.5K followersView on X
mürrez@murrezsec46d
Exploit
CVE-2026-12793 (CVSS 9.8) JetFormBuilder ≤3.6.2 — unauth admin/user creation via form ID injection PoC: check + exploit + mass scan → https://github.com/murrez/CVE-2026-12793 #WordPress #CVE #JetFormBuilder
Post summary
The text announces CVE-2026-12793 in JetFormBuilder with technical details and a high CVSS score, and provides a link to a GitHub PoC containing exploit code and mass scanning capabilities.
00041168
636 followersView on X
abraxas@abraxas_null44d
PoC
@PadhiyarRushi Been out for a few days https://github.com/abraxas/CVE-2026-12793 Lab breakdown: https://abraxaslabs.tech/research/cve-2026-12793
Post summary
The post references a GitHub repository and a lab breakdown page for CVE‑2026‑12793, indicating that a Proof of Concept is available.
0002063
636 followersView on X
ExploitGrid@exploitgrid45d
Disclosure
🛡️ ExploitGrid Daily Threat Digest Critical Exploits disclosed today: CVE-2026-22686 CVE-2026-5430 CVE-2026-86218 CVE-2026-12793 CVE-2026-12793 ..🧵👇
Post summary
The tweet serves as a header for a 'Daily Threat Digest' announcing that critical exploits for five CVEs (one duplicated) have been disclosed today, directing readers to a thread for further details without providing technical specifics, PoCs, or patch information in the tweet itself.
1000174
48 followersView on X
abraxas@abraxas_null45d
PoC
@ridvanyagli Proof-of-concept here: https://github.com/abraxas/CVE-2026-12793 Lab write-up (including infrastructure!) here: https://abraxaslabs.tech/research/cve-2026-12793
Post summary
The tweet advertises a proof‑of‑concept and a detailed lab write‑up for CVE‑2026-12793, highlighting the availability of exploitation materials.
0001081
111 followersView on X
ExploitGrid@exploitgrid45d
PoC
[EXPLOIT] CVE-2026-12793 [CRITICAL/PoC] CVE-2026-12793 🔗 https://exploitgrid.net/exploits/c9e3346c-00c7-4569-a69b-6e695ce29fab
Post summary
The text announces CVE-2026-12793 as critical and shares a link to a Proof of Concept, but provides no specific technical details, named exploit tools, or information about active exploitation or available patches.
1000043
48 followersView on X
ExploitGrid@exploitgrid45d
PoC
[EXPLOIT] CVE-2026-12793 [CRITICAL/PoC] CVE-2026-12793 🔗 https://exploitgrid.net/exploits/cfafaecb-e6db-4ca8-ab5e-9d58ce4eae86
Post summary
The tweet highlights a Proof of Concept for CVE‑2026‑12793 and provides a link to an exploit resource, without mentioning patches, active exploitation, or technical vulnerability details.
1000050
48 followersView on X
Cybersecurity News DE@cybsecuritynews45d
Disclosure
#schwachstellen CVE-2026-12793: Kritische Lücke in JetFormBuilder – Plugin mit über 80.000 Installationen potenziell betroffen #crocoblock #cve202612793 #dynamicblocksformbuilder #jetformbuilder #wordpress https://cybersecurity-news.de/cve-2026-12793-jetformbuilder-wordpress-plugin-80000-installationen
Post summary
The tweet announces the disclosure of CVE-2026-12793, a critical vulnerability in the JetFormBuilder WordPress plugin, noting that over 80,000 installations could be potentially affected.
0000046
12 followersView on X
abraxas@abraxas_null46d
Disclosure
Fresh 0day, just off the skillet! JetFormBuilder Unauthorized RCE (CRITICAL 9.8) https://github.com/abraxas/CVE-2026-12793/ https://t.co/lzaApyBZ2n
Post summary
The text announces a critical unauthorized RCE vulnerability (CVSS 9.8) in JetFormBuilder with a linked GitHub repository, but does not explicitly provide PoC code, exploit tools, active exploitation claims, or a named patch/remediation.
00000132
108 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-12793

Ryx[verified]@PadhiyarRushiPoC

The tweet announces the release of a public Proof of Concept for CVE-2026-12793, a critical RCE vulnerability in JetFormBuilder, and provides a link to the PoC repository.

Rıdvan Yağlı[verified]@ridvanyagliExploit

A Proof of Concept for CVE-2026-12793 in WordPress JetFormBuilder plugin has been published on GitHub with automated scanning and exploit capabilities, enabling unauthenticated remote attackers to create user accounts and potentially take over websites.

abraxas[verified]@abraxas_nullPoC

The post references a GitHub repository and a lab breakdown page for CVE‑2026‑12793, indicating that a Proof of Concept is available.

abraxas[verified]@abraxas_nullPoC

The tweet advertises a proof‑of‑concept and a detailed lab write‑up for CVE‑2026-12793, highlighting the availability of exploitation materials.

abraxas[verified]@abraxas_nullDisclosure

The text announces a critical unauthorized RCE vulnerability (CVSS 9.8) in JetFormBuilder with a linked GitHub repository, but does not explicitly provide PoC code, exploit tools, active exploitation claims, or a named patch/remediation.

mürrez@murrezsecExploit

The text announces CVE-2026-12793 in JetFormBuilder with technical details and a high CVSS score, and provides a link to a GitHub PoC containing exploit code and mass scanning capabilities.

ExploitGrid@exploitgridDisclosure

The tweet serves as a header for a 'Daily Threat Digest' announcing that critical exploits for five CVEs (one duplicated) have been disclosed today, directing readers to a thread for further details without providing technical specifics, PoCs, or patch information in the tweet itself.

ExploitGrid@exploitgridPoC

The text announces CVE-2026-12793 as critical and shares a link to a Proof of Concept, but provides no specific technical details, named exploit tools, or information about active exploitation or available patches.