CVE Catalog
CVE-2026-65540
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk0.13%
2th percentile - higher than 2% of all known CVEs
Summary
Unauthenticated Cross-Site Request Forgery (CSRF) in Popup for CF7 with Sweet Alert versions up to 1.6.5.
Risk Assessment
Risk of unauthorized actions performed in the context of an authenticated user, such as changing settings or submitting forms.
Recommendation
Update the Popup for CF7 with Sweet Alert plugin to the latest available version.
Other vulnerabilities in Popup for CF7 with Sweet Alert
Original NVD description (English source)
Unauthenticated Cross Site Request Forgery (CSRF) in Popup for CF7 with Sweet Alert <= 1.6.5 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS