Taboola

Products

ProductCVEsExploitedLatest
Taboola1–Oct 3, 2023
Taboola Pixel1–Mar 25, 2026

Exploited and recent CVEs

  • CVE-2026-32545 High 7.1 WordPress Taboola Pixel plugin <= 1.1.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2023-38398 Medium 4.3 WordPress Taboola Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%