CVE Intelligence

WPPOOL vulnerabilities

🔔 Create alert RSS

Published CVEs affecting WPPOOL products: 3 record(s), with severity, exploitation and fixes.

FormyChat 2FlexTable 1

Exploited only (KEV) →

CVE-2026-28571 High · 7.5 CWE-862 Aug 18, 2026
WordPress FormyChat plugin <= 2.15.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in FormyChat <= 2.15.7 versions.
CVE-2026-57379 High · 7.1 CWE-79 Jul 13, 2026
WordPress FormyChat plugin <= 2.15.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPPOOL FormyChat social-contact-form allows Stored XSS.This issue affects FormyChat: from n/a through <= 2.15.3.
CVE-2026-24582 Medium · 4.3 CWE-862 May 25, 2026
WordPress FlexTable plugin <= 3.24.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in WPPOOL FlexTable allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FlexTable: from n/a through 3.24.0.