CVE-2026-65540 in Popup for CF7 with Sweet Alert Plugin

Sumário

de VulDB • 23/07/2026

Cross-Site Request Forgery (CSRF) non autenticato nel plugin "Popup for CF7 with Sweet Alert" nelle versioni fino alla 1.6.5.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsável: Patchstack
• Reservar: 22/07/2026
• Divulgação: 23/07/2026
• Moderação: aceite
• Entrada: VDB-382723
• CPE: pronto
• CWE: CWE-352 (confirmado)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00094
• KEV: não
• Atividades: baixo
• Sector: Hostingprovider

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-65540
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-65540
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-65540/