CVE-2026-65442

WordPress FormCraft plugin <= 3.9.15 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.

We have discovered 13,817 live websites that are affected by CVE-2026-65442.

Run a Free Instant Scan



Affected Software

Product  FormCraft
Category Form Builders
Vulnerable Domains13,817 live websites (100% of FormCraft install base)
Vulnerable Versions
  • from 0 through 3.9.15
Vulnerable Versions Count73 versions ( 99% of all versions)


Common Weakness Enumeration

CWE-918 Server-Side Request Forgery (SSRF)



Details

  • Published - Jul 27, 2026
  • Updated - Jul 28, 2026

Credits

  • luc | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-65442
United States3,313 websites


Germany1,488 websites
Brazil759 websites
Italy729 websites
GB660 websites
France611 websites
Russia529 websites
Spain363 websites
Australia351 websites
Turkey345 websites

Website Distribution by TLD

Number of websites using CVE-2026-65442
.com5,173 websites
.de859 websites
.com.br736 websites
.it551 websites
.ru442 websites
.org434 websites
.co.uk405 websites
.com.au353 websites
.ch271 websites
.at237 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-65442

Top websites that are affected by CVE-2026-65442. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
************.com United States*,***
************.com Bulgaria**,***
***.ai United States**,***
*********.org Iran**,***
*********.de Germany**,***
***********.com United States**,***
****************.com France**,***
********.com United States**,***
*****.gov United States**,***
*******.org United States***,***
See full domain list

FAQ

CVE-2026-65442 is Server-Side Request Forgery (SSRF) in FormCraft
A total of 13,817 websites have been identified as vulnerable to CVE-2026-65442, based on global website indexing conducted by WebTechSurvey.
The FormCraft is affected by the CVE-2026-65442 vulnerability.
FormCraft versions up to and including 3.9.15 are vulnerable to CVE-2026-65442.