Skip to content
OpenAdvisories

Product · WPPOOL

FormyChat

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-28571

    WordPress FormyChat plugin <= 2.15.7 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in FormyChat <= 2.15.7 versions.

    WPPOOL FormyChat
  • High 7.1
    CVE-2026-57379

    WordPress FormyChat plugin <= 2.15.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPPOOL FormyChat social-contact-form allows Stored XSS.This issue affects FormyChat: from n/a through <= 2.15.3.

    WPPOOL FormyChat