CVE Intelligence

WPPOOL FormyChat vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting WPPOOL FormyChat: 2 record(s), with affected versions and fixes.

CVE-2026-28571 High · 7.5 CWE-862 Aug 18, 2026
WordPress FormyChat plugin <= 2.15.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in FormyChat <= 2.15.7 versions.
CVE-2026-57379 High · 7.1 CWE-79 Jul 13, 2026
WordPress FormyChat plugin <= 2.15.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPPOOL FormyChat social-contact-form allows Stored XSS.This issue affects FormyChat: from n/a through <= 2.15.3.