CVE-2026-78268

Summary

Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget &amp; AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads <= 1.2.0 versions.

Affected Software

VendorProductVersion RangeStatus
Extend ThemesLead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeadsn/a <= 1.2.0affected

Weaknesses

  • CWE-497: CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere

References