CVE-2026-28571

HighCVSS 7.5

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

The FormyChat plugin versions up to 2.15.7 contain an unauthenticated Broken Access Control vulnerability. An attacker without logging in can gain unauthorized access to functions.

Risk Assessment

The risk includes unauthorized access to sensitive plugin functions, which could lead to data integrity compromise or unauthorized changes.

Recommendation

It is recommended to update the FormyChat plugin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Unauthenticated Broken Access Control in FormyChat <= 2.15.7 versions.