CVE Notify
@cveNotify
19.1K subscribers
4 photos
182K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.1K subscribers
CVE Notify
🚨 CVE-2025-48617
In overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

🎖@cveNotify
37 views
CVE Notify
🚨 CVE-2025-48640
In multiple locations, there is a possible 3rd party passkey entry pairing approval due to a missing permission check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

🎖@cveNotify
36 views
CVE Notify
🚨 CVE-2025-48643
In multiple locations there is a possible provisioning bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

🎖@cveNotify
13 views
CVE Notify
🚨 CVE-2025-49403
Unauthenticated Arbitrary File Download in Premium Age Verification / Restriction for WordPress <= 3.0.2 versions.

🎖@cveNotify
Patchstack
Arbitrary File Download in WordPress Premium Age Verification / Restriction for WordPress Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
15 views
CVE Notify
🚨 CVE-2025-58924
Unauthenticated Local File Inclusion in Geya <= 1.15 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Geya Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2025-58952
Unauthenticated Local File Inclusion in Neuronet < 1.14.0 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Neuronet Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2025-58953
Unauthenticated Local File Inclusion in Joly <= 1.22.0 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Joly Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
13 views
CVE Notify
🚨 CVE-2025-58954
Unauthenticated Local File Inclusion in HomeRoofer <= 2.11.0 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress HomeRoofer Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
12 views
CVE Notify
🚨 CVE-2025-59560
Unauthenticated Cross Site Scripting (XSS) in Sonaar <= 4.27.4 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Sonaar Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
12 views
CVE Notify
🚨 CVE-2025-59563
Subscriber Privilege Escalation in Sonaar <= 4.27.4 versions.

🎖@cveNotify
Patchstack
Privilege Escalation in WordPress Sonaar Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
12 views
CVE Notify
🚨 CVE-2025-60085
Unauthenticated Local File Inclusion in Learnify <= 1.15.0 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Learnify Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2025-60205
Unauthenticated PHP Object Injection in ThemeREX Addons <= 2.36.1.1 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress ThemeREX Addons Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
12 views
CVE Notify
🚨 CVE-2025-60218
Subscriber Arbitrary File Upload in PT Luxa Addons <= 1.2.2 versions.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress PT Luxa Addons Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
14 views
CVE Notify
🚨 CVE-2025-60223
Subscriber Arbitrary File Deletion in WPBot Pro Wordpress Chatbot <= 13.6.5 versions.

🎖@cveNotify
Patchstack
Arbitrary File Deletion in WordPress WPBot Pro Wordpress Chatbot Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
15 views
CVE Notify
🚨 CVE-2025-69104
Unauthenticated Cross Site Scripting (XSS) in Qreatix <= 1.9.4 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Qreatix Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
13 views
CVE Notify
🚨 CVE-2025-69105
Unauthenticated Local File Inclusion in Modernee <= 1.6.0 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Modernee Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
13 views
CVE Notify
🚨 CVE-2025-69107
Unauthenticated Local File Inclusion in Rosaleen <= 2.8 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Rosaleen Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
13 views
CVE Notify
🚨 CVE-2025-69108
Unauthenticated PHP Object Injection in Hot Coffee <= 1.7 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Hot Coffee Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
14 views
CVE Notify
🚨 CVE-2025-69109
Unauthenticated Local File Inclusion in Raider Spirit <= 1.1.2 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Raider Spirit Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
14 views
CVE Notify
🚨 CVE-2025-69110
Unauthenticated Local File Inclusion in AirSupply <= 2.0.0 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress AirSupply Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
12 views
CVE Notify
🚨 CVE-2025-69112
Unauthenticated Local File Inclusion in Planty <= 1.14.0 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Planty Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
12 views