CVE-2026-77773mediumCWE-200

CVE-2026-77773: medium-severity vulnerability in Contact Form to Chat Apps | Click to Chat to…

Social Contact Form (FormyChat) < 2.15.8 - Unauthenticated Gravity Forms Entry Disclosure via formychat_get_gf_entry

Published

Follow this CVE+ Monitor Contact Form to Chat Apps | Click to Chat to Order

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 5.3epss 0.3%
The Contact Form to Chat Apps | Click to Chat to Order WordPress plugin before 2.15.8 does not perform any capability, nonce or session check on one of its public AJAX actions, allowing unauthenticated users to read the submitted entries of any form created with a supported third-party form Contact Form to Chat Apps | Click to Chat to Order WordPress plugin before 2.15.8.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Unknown · Contact Form to Chat Apps | Click to Chat to Order
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.