PoC Index85,092 CVEs with PoCs

CVE-2026-65540

WordPress Popup for CF7 with Sweet Alert plugin <= 1.6.5 - Cross Site Request Forgery (CSRF) vulnerability

HIGH 7.1EPSS 0.1%

Unauthenticated Cross Site Request Forgery (CSRF) in Popup for CF7 with Sweet Alert <= 1.6.5 versions.

Affected
Metin Saraç · Popup for CF7 with Sweet Alert
CVSS v3.1 PATCHSTACK
7.1 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
EPSS
0.13% chance of exploitation in the next 30 days, 2nd percentile
Published
2026-07-23

Proof-of-concept exploits (1)

References

Related