CVE Notify
@cveNotify
19.2K subscribers
4 photos
185K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.2K subscribers
CVE Notify
🚨 CVE-2026-39537
Unauthenticated Local File Inclusion in Mikado Core <= 1.6 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Mikado Core Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-39539
Unauthenticated PHP Object Injection in Alloggio - Hotel Booking <= 2.1.2 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Alloggio - Hotel Booking Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
11 views
CVE Notify
🚨 CVE-2026-39545
Unauthenticated PHP Object Injection in Zermatt <= 1.6.1 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Zermatt Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
12 views
CVE Notify
🚨 CVE-2026-39546
Subscriber Privilege Escalation in MultiLoca <= 4.2.15 versions.

🎖@cveNotify
Patchstack
Privilege Escalation in WordPress MultiLoca Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
13 views
CVE Notify
🚨 CVE-2026-39547
Unauthenticated Local File Inclusion in Getaway < 1.8 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Getaway Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
11 views
CVE Notify
🚨 CVE-2026-39548
Unauthenticated Cross Site Scripting (XSS) in MagOne <= 9.0 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress MagOne Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
11 views
CVE Notify
🚨 CVE-2026-39549
Unauthenticated Local File Inclusion in Aperitif <= 1.5 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Aperitif Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-39554
Unauthenticated PHP Object Injection in Fidalgo <= 1.2.2 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Fidalgo Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
11 views
CVE Notify
🚨 CVE-2026-39558
Unauthenticated Local File Inclusion in Malmö <= 2.2 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Malmö Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-39567
Unauthenticated PHP Object Injection in Santé <= 1.5.1 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Santé Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-39568
Unauthenticated Local File Inclusion in Mr. SEO <= 2.0 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Mr. SEO Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-39573
Unauthenticated PHP Object Injection in Mildhill <= 1.5 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Mildhill Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-39577
Unauthenticated PHP Object Injection in Playroom <= 1.4.1 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Playroom Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-39578
Unauthenticated PHP Object Injection in Valiance <= 1.2 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Valiance Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-39580
Unauthenticated PHP Object Injection in Micdrop <= 1.3.1 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Micdrop Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-39582
Unauthenticated Local File Inclusion in Hitek < 1.8.3 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Hitek Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-39589
Subscriber Arbitrary File Upload in Webenvo <= 0.0.6 versions.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Webenvo Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-39595
Author Broken Access Control in W3 Total Cache <= 2.9.1 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress W3 Total Cache Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-39596
Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Blocksy Companion Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-39597
Unauthenticated Cross Site Scripting (XSS) in WPZOOM Addons for Elementor <= 1.3.4 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress WPZOOM Addons for Elementor Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-39598
Unrestricted Upload of File with Dangerous Type vulnerability in Kodezen LLC Academy LMS Pro allows Upload a Web Shell to a Web Server.

This issue affects Academy LMS Pro: from n/a before 3.5.2.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Academy LMS Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views