Skip to content
OpenAdvisories
High · 7.5 CVE-2026-78268 EUVD-2026-65175GHSA-pvch-mwpv-4j95

WordPress Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads plugin <= 1.2.0 - Sensitive Data Exposure vulnerability

Published Aug 24, 2026 · Updated Aug 25, 2026 · Assigned by Patchstack

Vendor: Extend Themes Product: Lead Generation Contact Widget &amp; AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads

Description

Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget &amp; AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads <= 1.2.0 versions.

Affected products

VendorProductAffectedFixed
Extend Themes Lead Generation Contact Widget &amp; AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads ≤ 1.2.0 —

References