Skip to content
OpenAdvisories

Vendor

WPPOOL

10 known vulnerabilities.

Products

Sheets To WP Table Live Sync 2 FormyChat 2 FlexTable 1 WP Dark Mode – Improve Accessibility with AI Powered Dark Theme 1 Dark Mode – Improve Accessibility with AI Powered Dark Theme 1 Webinar and Video Conference with Jitsi Meet 1 FlexStock 1 FlexStock – Product Stock Sync with Google Sheets for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-107711

    FlexStock <= 3.17.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter via REST update endpoint

    The FlexStock – Product Stock Sync with Google Sheets for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'products[].post_content' parameter in all versions up to, and including, 3.17.2 due to insufficient input sanitiza…

    WPPOOL FlexStock – Product Stock Sync with Google Sheets for WooCommerce Web / CMS
  • Medium 6.4
    CVE-2026-93535

    WP Dark Mode – Improve Accessibility with AI Powered Dark Theme <= 5.3.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon_light' Shortcode Attribute

    The Dark Mode – Improve Accessibility with AI Powered Dark Theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'icon_light' Shortcode Attribute in all versions up to, and including, 5.3.17 due to insufficient input sanitization and…

    WPPOOL Dark Mode – Improve Accessibility with AI Powered Dark Theme Web / CMS
  • Medium 4.3
    CVE-2026-24582

    WordPress FlexTable plugin <= 3.24.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPPOOL FlexTable allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FlexTable: from n/a through 3.24.0.

    WPPOOL FlexTable
  • Medium 4.3
    CVE-2024-5449

    WP Dark Mode – WordPress Dark Mode Plugin for Improved Accessibility, Dark Theme, Night Mode, and Social Sharing <= 5.0.4 - Missing Authorization

    The WP Dark Mode – WordPress Dark Mode Plugin for Improved Accessibility, Dark Theme, Night Mode, and Social Sharing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpdm_social_share_save_option…

    WPPOOL WP Dark Mode – Improve Accessibility with AI Powered Dark Theme Web / CMS
  • Medium 5.9
    CVE-2024-34375

    WordPress Sheets to WP Table Live Sync plugin <= 3.7.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPPOOL Sheets To WP Table Live Sync allows Stored XSS.This issue affects Sheets To WP Table Live Sync: from n/a through 3.7.0.

    WPPOOL Sheets To WP Table Live Sync
  • Medium 6.5
    CVE-2024-30437

    WordPress Webinar and Video Conference with Jitsi Meet plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPPOOL Webinar and Video Conference with Jitsi Meet allows Stored XSS.This issue affects Webinar and Video Conference with Jitsi Meet: from n/a through 2.6.3.

    WPPOOL Webinar and Video Conference with Jitsi Meet
  • Medium 5.4
    CVE-2023-26535

    WordPress Sheets To WP Table Live Sync Plugin <= 2.12.15 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in WPPOOL Sheets To WP Table Live Sync plugin <= 2.12.15 versions.

    WPPOOL Sheets To WP Table Live Sync