CVE-2026-77773

Name of the Vulnerable Software and Affected Versions Contact Form to Chat Apps | Click to Chat to Order versions prior to 2.15.8

Description The plugin fails to perform capability, nonce, or session checks on a public AJAX action, specifically within the formychat get gf entry() function. This allows unauthenticated users to read submitted entries from any form created with a supported third-party form. A nonce is a unique token used to prevent replay attacks by ensuring that a request is intentional and comes from a trusted source.

Recommendations Update to version 2.15.8 or later.