Site Building with Toolset
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Toolset Blocks | 1 | – | Aug 24, 2026 |
| Toolset Forms | 1 | – | Jun 26, 2026 |
Exploited and recent CVEs
- CVE-2026-78264 WordPress Toolset Blocks plugin <= 1.6.26 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2026-56069 WordPress Toolset Forms plugin <= 2.6.24 - Insecure Direct Object References (IDOR) vulnerability 0.4%