CVE-2026-78268: Extend Themes Lead Generation Contact Widget & Ai Chatbot: Chat Button, Phone Call, Telegram, Email – Siteleads
High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.
Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads <= 1.2.0 versions.
Affected products
- Extend Themes Lead Generation Contact Widget & Ai Chatbot: Chat Button, Phone Call, Telegram, Email – Siteleads: up to and including 1.2.0
Published 2026-08-24. Last modified 2026-08-26.