Skip to content
PluginCanary

JetFormBuilder - Dynamic Blocks Form Builder

by jetmonsters · 80,000+ active installs · Checked 3 Nov 2026
Healthy14 Warnings

Healthy: vulnerability published 30 Oct 2026, fixed in 3.6.8.

83/ 100 Canary Score
Sub-scores for JetFormBuilder - Dynamic Blocks Form Builder
Ownership100
Maintenance100
Security60
Support70
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 3.6.8. Update to version 3.6.8 or later.30 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 12 Oct 2026, fixed in 3.6.6.1. Update to version 3.6.6.1 or later.12 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 3.6.6.1. Update to version 3.6.6.1 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 1 Oct 2026, fixed in 3.6.6. Update to version 3.6.6 or later.1 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 30 Sep 2026, fixed in 3.6.6. Update to version 3.6.6 or later.30 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 24 Sep 2026, fixed in 3.6.5.4. Update to version 3.6.5.4 or later.24 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 17 Sep 2026, fixed in 3.6.5.3. Update to version 3.6.5.3 or later.17 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 15 Sep 2026, fixed in 3.6.2.1. Update to version 3.6.2.1 or later.15 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 7 Sep 2026, fixed in 3.6.5.2. Update to version 3.6.5.2 or later.7 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 7 Sep 2026, fixed in 3.6.5.2. Update to version 3.6.5.2 or later.7 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 3 Sep 2026, fixed in 3.6.5.2. Update to version 3.6.5.2 or later.3 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 3 Sep 2026, fixed in 3.6.2.1. Update to version 3.6.2.1 or later.3 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 3 Sep 2026, fixed in 3.6.5.2. Update to version 3.6.5.2 or later.3 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 3 Sep 2026, fixed in 3.6.5.2. Update to version 3.6.5.2 or later.3 Sep 2026Evidence
  • InfoSEC-323 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master20 Jan 2021 to 20 Jan 2021, 1 commits
crocoblock25 Jan 2021 to 8 Sep 2021, 32 commits
jetmonsters1 Nov 2021 to 30 Oct 2026, 127 commits

3 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
5 days ago
Releases, 24 months
43
Tested up to
7.0 vs 7.1
Requires PHP
7.0 supported 8.2+
Releases per quarter for JetFormBuilder - Dynamic Blocks Form Builder
Q1 20244
Q2 20244
Q3 20244
Q4 20244
Q1 20253
Q2 20255
Q3 20252
Q4 20254
Q1 20263
Q2 20269
Q3 20269
Q4 20264

Last release 30 Oct 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026JetFormBuilder — Dynamic Blocks Form Builder <= 3.6.7.1 - Missing Authorization5.3<= 3.6.7.13.6.80
12 Oct 2026JetFormBuilder — Dynamic Blocks Form Builder <= 3.6.6 - Missing Authorization5.3<= 3.6.63.6.6.10
9 Oct 2026JetFormBuilder <= 3.6.6 - Reflected DOM-Based Cross-Site Scripting via 'query_var' Dynamic Preset via data-jfb-macro / JFB_FIELD:: Macro Renderer4.7<= 3.6.63.6.6.10
1 Oct 2026JetFormBuilder <= 3.6.5.4 - Unauthenticated Stored Cross-Site Scripting via 'choice' Post Meta via Insert/Update Post Action7.2<= 3.6.5.43.6.60
30 Sep 2026JetFormBuilder — Dynamic Blocks Form Builder <= 3.6.5.4 - Unauthenticated Stored Cross-Site Scripting7.2<= 3.6.5.43.6.60
24 Sep 2026JetFormBuilder <= 3.6.5.3 - Reflected Cross-Site Scripting via 'jfb_xss' (URL Query Variable) Parameter via Calculated Field6.1<= 3.6.5.33.6.5.40
17 Sep 2026JetFormBuilder <= 3.6.5.2 - Authenticated (Administrator+) Arbitrary File Deletion6.5<= 3.6.5.23.6.5.30
15 Sep 2026JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter9.8<= 3.6.23.6.2.10
7 Sep 2026JetFormBuilder — Dynamic Blocks Form Builder <= 3.6.5.1 - Unauthenticated Stored Cross-Site Scripting7.2<= 3.6.5.13.6.5.20
7 Sep 2026JetFormBuilder — Dynamic Blocks Form Builder < 3.6.5.2 - Unauthenticated Information Exposure5.3< 3.6.5.23.6.5.20
3 Sep 2026JetFormBuilder — Dynamic Blocks Form Builder < 3.6.5.2 - Unauthenticated Stored Cross-Site Scripting7.2< 3.6.5.23.6.5.20
3 Sep 2026JetFormBuilder — Dynamic Blocks Form Builder < 3.6.5.2 - Unauthenticated Email Header Injection5.3< 3.6.5.23.6.5.20
3 Sep 2026JetFormBuilder — Dynamic Blocks Form Builder < 3.6.5.2 - Unauthenticated Arbitrary Shortcode Execution9.8< 3.6.5.23.6.5.20
3 Sep 2026JetFormBuilder <= 3.6.2 - Missing Authorization to Unauthenticated JetEngine Options Page Modification5.3<= 3.6.23.6.2.10
4 Aug 2026JetFormBuilder — Dynamic Blocks Form Builder <= 3.6.4.1 - Missing Authorization5.3<= 3.6.4.13.6.4.20
1 Jul 2026JetFormBuilder <= 3.6.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'context' Parameter5.3<= 3.6.33.6.3.10
16 Jun 2026JetFormBuilder — Dynamic Blocks Form Builder <= 3.6.0.1 - Unauthenticated Stored Cross-Site Scripting7.2<= 3.6.0.13.6.10
16 Jun 2026JetFormBuilder — Dynamic Blocks Form Builder <= 3.6.1 - Authenticated (Subscriber+) Privilege Escalation8.8<= 3.6.13.6.1.10
23 Mar 2026JetFormBuilder — Dynamic Blocks Form Builder <= 3.5.6.1 - Authenticated (Contributor+) Remote Code Execution8.8<= 3.5.6.13.5.6.20
20 Mar 2026JetFormBuilder <= 3.5.6.2 - Unauthenticated Arbitrary File Read via Media Field7.5<= 3.5.6.23.5.6.30
15 Dec 2025JetFormBuilder <= 3.5.3 - Missing Authorization to Unauthenticated Form Generation5.3<= 3.5.33.5.40
29 Nov 2025JetFormBuilder <= 3.5.3 - Missing Authorization5.3<= 3.5.33.5.40
16 Jul 2025JetFormBuilder <= 3.5.1.2 - Authenticated (Administrator+) PHP Object Injection6.6<= 3.5.1.23.5.20
2 Aug 2024JetFormBuilder <= 3.3.4.1 - Authenticated (Administrator+) Privilege Escalation7.2<= 3.3.4.13.3.4.20
28 Nov 2023JetFormBuilder <= 3.1.4 - Unauthenticated Content Injection5.3<= 3.1.43.1.50

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for JetFormBuilder - Dynamic Blocks Form Builder
Q3 20243.0
Q4 20243.0
Q1 20254.0
Q2 20254.7
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q2 20264.5
Q4 20265.0

Average rating rose from 3.0 to 5.0 between Q3 2024 and Q4 2026.

Rating distribution
5 star54
4 star1
3 star4
2 star1
1 star12
Latest low reviews

Momentum

80,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for JetFormBuilder - Dynamic Blocks Form Builder
4 May 20262,593
11 May 20264,955
18 May 20267,798
25 May 202623,666
1 Jun 20267,208
8 Jun 202639,181
15 Jun 202629,115
22 Jun 202642,766
29 Jun 202628,809
6 Jul 202611,270
13 Jul 20264,495
20 Jul 202639,808
27 Jul 202625,891
3 Aug 202632,220
10 Aug 202630,366
17 Aug 20267,512
24 Aug 20265,401
31 Aug 202625,055
7 Sep 202610,503
14 Sep 202629,935
21 Sep 202633,919
28 Sep 202628,012
5 Oct 202630,118
12 Oct 202625,900
19 Oct 202626,984
26 Oct 202629,453
2 Nov 20262,766

Weekly downloads over the last 4 weeks are 2% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Online Forms - Customizable Payment, Contact, Quiz, Survey Form Builder - JotformScore 91 · 20,000+Zoho Forms - Drag & Drop Form Builder for Websites - Contact Forms, Payment Forms, Order Forms & MoreScore 91 · 10,000+Contact Form Clean and SimpleScore 91 · 7,000+Formzu WPScore 91 · 3,000+Woorise - Forms, Quizzes & GiveawaysScore 91 · 1,000+

Facts

Version3.6.8
Authorjetmonsters
Added25 Jan 2021
Last updated30 Oct 2026
Active installs80,000+
Requires WordPress6.1
Tested up to7.0.8
Requires PHP7.0
CategoryForms & Data Collection > Form Builders & Creators
Tagsforms, blocks, gutenberg, contact form, form builder

Other plugins by this author: Getwid - Gutenberg Blocks, Timetable and Event Schedule by MotoPress, JetSticky For Elementor, Stratum Widgets for Elementor, MotoPress Hotel Booking Styles & Templates, MotoPress Hotel Booking, JetWidgets For Elementor, JetStyleManager for Gutenberg, MotoPress Hotel Booking for Elementor, JetWidgets for Elementor and WooCommerce, JetGridBuilder - Grid Builder for Elementor and Gutenberg, Another Mailchimp Widget

Questions

Is JetFormBuilder - Dynamic Blocks Form Builder still maintained?

JetFormBuilder - Dynamic Blocks Form Builder was last updated on 30 Oct 2026. Its Canary status is Healthy.

Is JetFormBuilder - Dynamic Blocks Form Builder safe?

JetFormBuilder - Dynamic Blocks Form Builder has no open unpatched vulnerabilities on record. 23 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns JetFormBuilder - Dynamic Blocks Form Builder?

The wordpress.org author is jetmonsters. Recent committers: jetmonsters, crocoblock, plugin-master. We have recorded no ownership change.

What can I use instead of JetFormBuilder - Dynamic Blocks Form Builder?

Plugins in the same category with a higher Canary Score: Online Forms - Customizable Payment, Contact, Quiz, Survey Form Builder - Jotform, Zoho Forms - Drag & Drop Form Builder for Websites - Contact Forms, Payment Forms, Order Forms & More, Contact Form Clean and Simple, Formzu WP, Woorise - Forms, Quizzes & Giveaways.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue