Vulnerabilities in wppool
10 resultsCVE-2025-30765HIGHWordPress FlexStock plugin <= 3.13.1 - SQL Injection VulnerabilityEPSS 0.6%CVE-2026-28571HIGHWordPress FormyChat plugin <= 2.15.7 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-30437MEDIUMWordPress Webinar and Video Conference with Jitsi Meet plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-34375MEDIUMWordPress Sheets to WP Table Live Sync plugin <= 3.7.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-5449MEDIUMWP Dark Mode – WordPress Dark Mode Plugin for Improved Accessibility, Dark Theme, Night Mode, and Social Sharing <= 5.0.4 - Missing AuthorizationEPSS 0.3%CVE-2026-107711MEDIUMFlexStock <= 3.17.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter via REST update endpointEPSS 0.3%CVE-2023-26535MEDIUMWordPress Sheets To WP Table Live Sync Plugin <= 2.12.15 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2026-57379HIGHWordPress FormyChat plugin <= 2.15.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-24582MEDIUMWordPress FlexTable plugin <= 3.24.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-93535MEDIUMWP Dark Mode – Improve Accessibility with AI Powered Dark Theme <= 5.3.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon_light' Shortcode AttributeEPSS 0.2%