CVE Catalog
CVE-2026-65442
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk0.58%
47th percentile - higher than 47% of all known CVEs
Summary
SSRF vulnerability in FormCraft up to version 3.9.15. An unauthenticated attacker can make the server send requests to internal network resources.
Risk Assessment
Risk includes internal network scanning, access to sensitive data, or attacks on other internal systems.
Recommendation
Immediately update the FormCraft plugin to the latest available version.
Other vulnerabilities in FormCraft
Original NVD description (English source)
Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS