44 matches found
EUVD-2026-65175
Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads = 1.2.0 versions...
CVE-2026-78268
Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads = 1.2.0 versions...
CVE-2026-78268 WordPress Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads plugin <= 1.2.0 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads = 1.2.0 versions...
CVE-2026-78268 WordPress Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads plugin <= 1.2.0 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads = 1.2.0 versions...
PT-2026-81061
Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads = 1.2.0 versions...
CVE-2026-32472
Unauthenticated Broken Access Control in Online Contact Widget = 1.3.0 versions...
CVE-2026-32472 WordPress Online Contact Widget plugin <= 1.3.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Online Contact Widget = 1.3.0 versions...
CVE-2026-32472
CVE-2026-32472 is an unauthenticated Broken Access Control vulnerability in the WordPress Online Contact Widget plugin, affecting versions ≤ 1.3.0 . The flaw allows an unauthenticated attacker to access data they should not be able to, resulting in high confidentiality impact with no integrity or...
CVE-2026-32472
Unauthenticated Broken Access Control in Online Contact Widget = 1.3.0 versions...
CVE-2026-32472 WordPress Online Contact Widget plugin <= 1.3.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Online Contact Widget = 1.3.0 versions...
EUVD-2026-60906
Unauthenticated Broken Access Control in Online Contact Widget = 1.3.0 versions...
WordPress Online Contact Widget plugin <= 1.3.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Online Contact Widget versions = 1.3.0...
PT-2026-77048
Unauthenticated Broken Access Control in Online Contact Widget = 1.3.0 versions...
WordPress Contact Form Builder, Contact Widget plugin <= 1.6.1 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by Milad karimi in WordPress Plugin Contact Form Builder, Contact Widget versions = 1.6.1...
EUVD-2023-50336
Malicious code in bioql PyPI...
EUVD-2025-11989
Malicious code in bioql PyPI...
CVE-2025-46529
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StressFree Sites Business Contact Widget business-contact-widget allows Stored XSS.This issue affects Business Contact Widget: from n/a through = 2.7.0...
WordPress Business Contact Widget plugin <= 2.7.0 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Business Contact Widget versions = 2.7.0...
CVE-2025-46529
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StressFree Sites Business Contact Widget business-contact-widget allows Stored XSS.This issue affects Business Contact Widget: from n/a through = 2.7.0...
CVE-2025-46529
CVE-2025-46529 describes a stored XSS in the StressFree Sites Business Contact Widget (WordPress plugin) caused by improper input neutralization during web page generation. Affected versions are n/a through 2.7.0. Mitigation: upgrade the widget to a version later than 2.7.0 (exact fixed version n...