CVE Notify
@cveNotify
19.2K subscribers
4 photos
185K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.2K subscribers
CVE Notify
🚨 CVE-2026-39554
Unauthenticated PHP Object Injection in Fidalgo <= 1.2.2 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Fidalgo Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
11 views
CVE Notify
🚨 CVE-2026-39558
Unauthenticated Local File Inclusion in Malmö <= 2.2 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Malmö Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-39567
Unauthenticated PHP Object Injection in Santé <= 1.5.1 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Santé Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-39568
Unauthenticated Local File Inclusion in Mr. SEO <= 2.0 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Mr. SEO Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-39573
Unauthenticated PHP Object Injection in Mildhill <= 1.5 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Mildhill Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-39577
Unauthenticated PHP Object Injection in Playroom <= 1.4.1 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Playroom Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-39578
Unauthenticated PHP Object Injection in Valiance <= 1.2 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Valiance Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-39580
Unauthenticated PHP Object Injection in Micdrop <= 1.3.1 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Micdrop Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-39582
Unauthenticated Local File Inclusion in Hitek < 1.8.3 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Hitek Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-39589
Subscriber Arbitrary File Upload in Webenvo <= 0.0.6 versions.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Webenvo Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-39595
Author Broken Access Control in W3 Total Cache <= 2.9.1 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress W3 Total Cache Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-39596
Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Blocksy Companion Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-39597
Unauthenticated Cross Site Scripting (XSS) in WPZOOM Addons for Elementor <= 1.3.4 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress WPZOOM Addons for Elementor Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-39598
Unrestricted Upload of File with Dangerous Type vulnerability in Kodezen LLC Academy LMS Pro allows Upload a Web Shell to a Web Server.

This issue affects Academy LMS Pro: from n/a before 3.5.2.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Academy LMS Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-40721
Contributor Local File Inclusion in Element Pack Pro <= 9.0.6 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Element Pack Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-40722
Missing Authorization vulnerability in Yoast BV Yoast SEO Premium allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Yoast SEO Premium: from n/a through 26.6.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Yoast SEO Premium Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-40723
Subscriber Broken Access Control in Bricks Builder <= 2.1.4 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Bricks Builder Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-40724
CP Client Arbitrary File Download in Client Portal (Pro) <= 5.6.2 versions.

🎖@cveNotify
Patchstack
Arbitrary File Download in WordPress Client Portal (Pro) Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-40725
Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress WooCommerce Product Filters Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-40726
Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.14 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress User Registration Stripe Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-40731
Unauthenticated Local File Inclusion in ChapterOne <= 1.7 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress ChapterOne Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
11 views