Unauthorized Access Vulnerability in Contact Form to Chat Apps Plugin by WordPress
CVE-2026-77773
Currently unrated
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 13 September 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-77773?
The Contact Form to Chat Apps | Click to Chat to Order plugin for WordPress, prior to version 2.15.8, is susceptible to an improper authentication vulnerability. This issue arises from the lack of capability, nonce, or session checks on a public AJAX action. As a result, unauthenticated users can read the submitted entries of any forms created using this plugin, posing a significant risk to users' data privacy.
Affected Version(s)
Contact Form to Chat Apps | Click to Chat to Order 0 < 2.15.8
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.