wppool vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20243
3. 20251
4. 20265

Newest CVEs

• CVE-2026-107711

  FlexStock <= 3.17.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter via REST update endpoint

  wppool · FlexStock – Product Stock Sync with Google Sheets for WooCommerce

  Medium6.4
• CVE-2026-93535

  WP Dark Mode – Improve Accessibility with AI Powered Dark Theme <= 5.3.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon_light' Shortcode Attribute

  wppool · Dark Mode – Improve Accessibility with AI Powered Dark Theme

  Medium6.4
• CVE-2026-28571

  WordPress FormyChat plugin <= 2.15.7 - Broken Access Control vulnerability

  WPPOOL · FormyChat

  High7.5
• CVE-2026-57379

  WordPress FormyChat plugin <= 2.15.3 - Cross Site Scripting (XSS) vulnerability

  WPPOOL · FormyChat

  High7.1
• CVE-2026-24582

  WordPress FlexTable plugin <= 3.24.0 - Broken Access Control vulnerability

  WPPOOL · FlexTable

  Medium4.3
• CVE-2025-30765

  WordPress FlexStock plugin <= 3.13.1 - SQL Injection Vulnerability

  WPPOOL · FlexStock

  High7.6
• CVE-2024-5449

  WP Dark Mode – WordPress Dark Mode Plugin for Improved Accessibility, Dark Theme, Night Mode, and Social Sharing <= 5.0.4 - Missing Authorization

  wppool · WP Dark Mode – Improve Accessibility with AI Powered Dark Theme

  Medium4.3
• CVE-2024-34375

  WordPress Sheets to WP Table Live Sync plugin <= 3.7.0 - Cross Site Scripting (XSS) vulnerability

  WPPOOL · Sheets To WP Table Live Sync

  Medium5.9
• CVE-2024-30437

  WordPress Webinar and Video Conference with Jitsi Meet plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability

  WPPOOL · Webinar and Video Conference with Jitsi Meet

  Medium6.5
• CVE-2023-26535

  WordPress Sheets To WP Table Live Sync Plugin <= 2.12.15 is vulnerable to Cross Site Request Forgery (CSRF)

  WPPOOL · Sheets To WP Table Live Sync

  Medium5.4