19 matches found
CVE-2026-77773
The Contact Form to Chat Apps | Click to Chat to Order WordPress plugin (versions before 2.15.8 ) is vulnerable to unauthorized data disclosure. The flaw exists because one of its public AJAX actions fails to perform required capability, nonce, or session checks . This allows unauthenticated user...
CVE-2026-77773 Social Contact Form (FormyChat) < 2.15.8 - Unauthenticated Gravity Forms Entry Disclosure via formychat_get_gf_entry
The Contact Form to Chat Apps | Click to Chat to Order WordPress plugin before 2.15.8 does not perform any capability, nonce or session check on one of its public AJAX actions, allowing unauthenticated users to read the submitted entries of any form created with a supported third-party form Conta...
CVE-2026-28571
Unauthenticated Broken Access Control in FormyChat = 2.15.7 versions...
CVE-2026-28571
Unauthenticated Broken Access Control in FormyChat = 2.15.7 versions...
CVE-2026-28571 WordPress FormyChat plugin <= 2.15.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in FormyChat = 2.15.7 versions...
CVE-2026-28571
The WordPress FormyChat plugin (versions ≤ 2.15.7) has an unauthenticated broken access control vulnerability exploitable over the network with no privileges, rated CVSS 7.5 (HIGH) with high confidentiality impact. No specific root cause, affected endpoint, or fix version is provided in the docum...
EUVD-2026-60896
Unauthenticated Broken Access Control in FormyChat = 2.15.7 versions...
CVE-2026-28571 WordPress FormyChat plugin <= 2.15.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in FormyChat = 2.15.7 versions...
CVE-2026-28571: Missing Authorization
Unauthenticated Broken Access Control in FormyChat = 2.15.7 versions...
PT-2026-77038
Unauthenticated Broken Access Control in FormyChat = 2.15.7 versions...
WordPress FormyChat plugin <= 2.15.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Doan Dinh Van in WordPress Plugin FormyChat versions = 2.15.7...
EUVD-2026-43454
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPPOOL FormyChat social-contact-form allows Stored XSS.This issue affects FormyChat: from n/a through = 2.15.3...
CVE-2026-57379
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPPOOL FormyChat social-contact-form allows Stored XSS.This issue affects FormyChat: from n/a through = 2.15.3...
CVE-2026-57379 WordPress FormyChat plugin <= 2.15.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPPOOL FormyChat social-contact-form allows Stored XSS.This issue affects FormyChat: from n/a through = 2.15.3...
CVE-2026-57379 WordPress FormyChat plugin <= 2.15.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPPOOL FormyChat social-contact-form allows Stored XSS.This issue affects FormyChat: from n/a through = 2.15.3...
CVE-2026-57379
The CVE-2026-57379 entry is for the WordPress FormyChat plugin (WPPOOL FormyChat social-contact-form) with a stored XSS in versions up to 2.15.3 due to improper input neutralization during web page generation. Affected product: FormyChat plugin (
CVE-2026-57379: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPPOOL FormyChat social-contact-form allows Stored XSS.This issue affects FormyChat: from n/a through = 2.15.3...
PT-2026-57692
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPPOOL FormyChat social-contact-form allows Stored XSS.This issue affects FormyChat: from n/a through = 2.15.3...