CVE-2026-28571

The WordPress FormyChat plugin (versions ≤ 2.15.7) has an unauthenticated broken access control vulnerability exploitable over the network with no privileges, rated CVSS 7.5 (HIGH) with high confidentiality impact. No specific root cause, affected endpoint, or fix version is provided in the docum...

CVE-2026-28571 WordPress FormyChat plugin <= 2.15.7 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in FormyChat = 2.15.7 versions...