CVE-2026-65466

WordPress JetBooking plugin <= 4.1.2 - Server Side Request Forgery (SSRF) vulnerability

Custom role Server Side Request Forgery (SSRF) in JetBooking <= 4.1.2 versions.

We have discovered 215 live websites that are affected by CVE-2026-65466.

Run a Free Instant Scan



Common Weakness Enumeration

CWE-918 Server-Side Request Forgery (SSRF)



Details

  • Published - Jul 23, 2026
  • Updated - Jul 23, 2026

Credits

  • Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-65466
United States31 websites


Germany29 websites
France15 websites
Brazil12 websites
Spain11 websites
Bulgaria7 websites
GB7 websites
Italy7 websites
Belgium6 websites
Netherlands6 websites

Website Distribution by TLD

Number of websites using CVE-2026-65466
.com94 websites
.de15 websites
.com.br12 websites
.nl5 websites
.pl4 websites
.be4 websites
.ch4 websites
.it4 websites
.co.uk4 websites
.es4 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-65466

Top websites that are affected by CVE-2026-65466. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
**********.de Germany***,***
*************.de Germany*,***,***
********.com Germany*,***,***
***************.de Germany*,***,***
**********.ch Switzerland*,***,***
***********.com France*,***,***
***********.com Germany*,***,***
***************.com Canada*,***,***
***************.si Slovenia*,***,***
***********.si United States*,***,***
See full domain list