EUVD-2026-65171

Unauthenticated Cross Site Scripting XSS in Toolset Blocks = 1.6.26 versions...

CVE-2026-78264

Unauthenticated Cross Site Scripting XSS in Toolset Blocks = 1.6.26 versions...

CVE-2026-78264 WordPress Toolset Blocks plugin <= 1.6.26 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Toolset Blocks = 1.6.26 versions...

CVE-2026-78264

CVE-2026-78264 is an unauthenticated Cross-Site Scripting (XSS) vulnerability affecting the WordPress Toolset Blocks plugin in versions 1.6.26 and earlier . The CNA (Patchstack) assigns a CVSS 3.1 base score of 7.1 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, indicating a network-explo...

CVE-2026-78264 WordPress Toolset Blocks plugin <= 1.6.26 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Toolset Blocks = 1.6.26 versions...

WordPress Toolset Blocks plugin <= 1.6.26 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Toolset Blocks versions = 1.6.26...

PT-2026-81057

Name of the Vulnerable Software and Affected Versions Toolset Blocks versions 1.6.26 and earlier Description Unauthenticated Cross-Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update Toolset Blocks to...

CVE-2026-78264: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Toolset Blocks = 1.6.26 versions...