Skip to content
Wppool vulnerabilities
Newest
-
wppool flexstock – product stock sync with google sheets for woocommerce
FlexStock <= 3.17.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter via REST update endpoint
CVE-2026-107711
6.4 Medium
-
wppool dark mode – improve accessibility with ai powered dark theme
WP Dark Mode – Improve Accessibility with AI Powered Dark Theme <= 5.3.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon_light' Shortcode Attribute
CVE-2026-93535
6.4 Medium
-
wppool formychat
WordPress FormyChat plugin <= 2.15.7 - Broken Access Control vulnerability
CVE-2026-28571
7.5 High
-
wppool formychat
WordPress FormyChat plugin <= 2.15.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57379
7.1 High
-
unknown flextable
WordPress FlexTable plugin <= 3.24.0 - Broken Access Control vulnerability
CVE-2026-24582
4.3 Medium
-
wppool flexstock
WordPress FlexStock plugin <= 3.13.1 - SQL Injection Vulnerability
CVE-2025-30765
7.6 High
-
wppool wp dark mode, wp dark mode – improve accessibility with ai powered dark theme +1 more
WP Dark Mode – WordPress Dark Mode Plugin for Improved Accessibility, Dark Theme, Night Mode, and Social Sharing <= 5.0.4 - Missing Authorization
CVE-2024-5449
4.3 Medium
-
wppool sheets to wp table live sync
WordPress Sheets to WP Table Live Sync plugin <= 3.7.0 - Cross Site Scripting (XSS) vulnerability
CVE-2024-34375
5.9 Medium
-
wppool webinar and video conference with jitsi meet
WordPress Webinar and Video Conference with Jitsi Meet plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability
CVE-2024-30437
6.5 Medium
-
wppool sheets to wp table live sync
WordPress Sheets To WP Table Live Sync Plugin <= 2.12.15 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-26535
5.4 Medium
-
unknown wp dark mode
WP Dark Mode < 4.0.8 - Subscriber+ Local File Inclusion
CVE-2023-0467
4.3 Medium
-
unknown wp dark mode
WP Dark Mode < 4.0.0 - Contributor+ Stored XSS in Shortcode
CVE-2022-4714
5.4 Medium