Site Building with Toolset vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.3%	CVE-2026-78264Toolset Blocks (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2026-08-24CVE Database V5CVE-2026-78264 CVE-2026-78264 is a high-severity vulnerability in Toolset Blocks, a product of Site Building with Toolset. It is an unauthenticated Cross-Site Scripting (XSS) flaw affecting versions up to and including 1.6.26. This vulnerability allows an attacker to inject malicious scripts during web page generation without requiring authentication. The vulnerability has a CVSS score of 7.1, indicating a significant risk. No official patch or remediation details are currently provided by the vendor. There are no known exploits in the wild at this time. EPSS 0.3%Vulnerability Site Building with Toolset CWE-79	CVE Database V5	2026-08-24
High	7.5	EPSS 0.4%	CVE-2026-56069Toolset Forms (WordPress plugin) · Insecure Direct Object Reference High7.5EPSS 0.4%2026-06-26CVE Database V5CVE-2026-56069 Unauthenticated Insecure Direct Object References (IDOR) in Toolset Forms <= 2.6.24 versions. EPSS 0.4%Vulnerability Site Building with Toolset CWE-639	CVE Database V5	2026-06-26

Page 1 of 1