CVE Catalog
CVE-2026-65442
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk0.16%
6th percentile - higher than 6% of all known CVEs
Summary
SSRF vulnerability in FormCraft up to version 3.9.15. An unauthenticated attacker can make the server send requests to internal network resources.
Risk Assessment
Risk includes internal network scanning, access to sensitive data, or attacks on other internal systems.
Recommendation
Immediately update the FormCraft plugin to the latest available version.
Other vulnerabilities in FormCraft
Original NVD description (English source)
Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.