Vendor

Site Building with Toolset

2 known vulnerabilities.

Products

Toolset Blocks 1 Toolset Forms 1

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.1

CVE-2026-78264

WordPress Toolset Blocks plugin <= 1.6.26 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Toolset Blocks <= 1.6.26 versions.

Site Building with Toolset Toolset Blocks

Aug 24, 2026
High 7.5

CVE-2026-56069

WordPress Toolset Forms plugin <= 2.6.24 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References (IDOR) in Toolset Forms <= 2.6.24 versions.

Site Building with Toolset Toolset Forms

Jun 26, 2026