CVE-2026-90984
MediumCVSS 5.8Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
The Generate PDF using Contact Form 7 WordPress plugin before 4.2.2 does not restrict the destination of the image fetch its PDF renderer performs on submitted form content, allowing unauthenticated users to make the server request internal resources and read the response back through the generated PDF.
Risk Assessment
An attacker can access internal server resources (SSRF) and exfiltrate data through the generated PDF document.
Recommendation
Update the plugin to version 4.2.2 or later. Consider restricting outbound connections from the web server.
Other vulnerabilities in Generate PDF using Contact Form 7
Original NVD description (English source)
The Generate PDF using Contact Form 7 WordPress plugin before 4.2.2 does not restrict the destination of the image fetch its PDF renderer performs on submitted form content, allowing unauthenticated users to make the server request internal resources and read the response back through the generated PDF.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS