WPPOOL

Products

Product	CVEs	Exploited	Latest
FormyChat	2	–	Aug 18, 2026
Sheets To WP Table Live Sync	2	–	May 6, 2024
FlexStock – Product Stock Sync with Google Sheets for WooCommerce	1	–	Oct 31, 2026
FlexTable	1	–	May 25, 2026
Webinar and Video Conference with Jitsi Meet	1	–	Mar 29, 2024
Dark Mode – Improve Accessibility with AI Powered Dark Theme	1	–	Oct 16, 2026
WP Dark Mode – Improve Accessibility with AI Powered Dark Theme	1	–	Jun 6, 2024
FlexStock	1	–	Mar 27, 2025

CVE-2026-107711 Medium 6.4 FlexStock <= 3.17.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter via REST update endpoint 0.3%
CVE-2026-93535 Medium 6.4 WP Dark Mode – Improve Accessibility with AI Powered Dark Theme <= 5.3.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon_light' Shortcode Attribute 0.2%
CVE-2026-28571 High 7.5 WordPress FormyChat plugin <= 2.15.7 - Broken Access Control vulnerability 0.4%
CVE-2026-57379 High 7.1 WordPress FormyChat plugin <= 2.15.3 - Cross Site Scripting (XSS) vulnerability 0.3%
CVE-2026-24582 Medium 4.3 WordPress FlexTable plugin <= 3.24.0 - Broken Access Control vulnerability 0.2%
CVE-2025-30765 High 7.6 WordPress FlexStock plugin <= 3.13.1 - SQL Injection Vulnerability 0.6%
CVE-2024-5449 Medium 4.3 WP Dark Mode – WordPress Dark Mode Plugin for Improved Accessibility, Dark Theme, Night Mode, and Social Sharing <= 5.0.4 - Missing Authorization 0.3%
CVE-2024-34375 Medium 5.9 WordPress Sheets to WP Table Live Sync plugin <= 3.7.0 - Cross Site Scripting (XSS) vulnerability 0.4%
CVE-2024-30437 Medium 6.5 WordPress Webinar and Video Conference with Jitsi Meet plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability 0.4%
CVE-2023-26535 Medium 5.4 WordPress Sheets To WP Table Live Sync Plugin <= 2.12.15 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%