CVE-2026-65442

Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.

Score

CVSS 3.1 7.2 High

Status

Deferred - audit@patchstack.com

Published

2026-07-27

Last modified

2026-10-24

Weaknesses

CWE-918

Affected products

• Formcraft (Subtle Web Inc)

References

• https://patchstack.com/database/wordpress/plugin/formcraft/vulnerability/wordpress-formcraft-plugin-3-9-15-server-side-…