CVE Notify
@cveNotify
19.2K subscribers
4 photos
185K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.2K subscribers
CVE Notify
🚨 CVE-2026-39582
Unauthenticated Local File Inclusion in Hitek < 1.8.3 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Hitek Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-39589
Subscriber Arbitrary File Upload in Webenvo <= 0.0.6 versions.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Webenvo Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-39595
Author Broken Access Control in W3 Total Cache <= 2.9.1 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress W3 Total Cache Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-39596
Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Blocksy Companion Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-39597
Unauthenticated Cross Site Scripting (XSS) in WPZOOM Addons for Elementor <= 1.3.4 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress WPZOOM Addons for Elementor Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-39598
Unrestricted Upload of File with Dangerous Type vulnerability in Kodezen LLC Academy LMS Pro allows Upload a Web Shell to a Web Server.

This issue affects Academy LMS Pro: from n/a before 3.5.2.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Academy LMS Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-40721
Contributor Local File Inclusion in Element Pack Pro <= 9.0.6 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Element Pack Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-40722
Missing Authorization vulnerability in Yoast BV Yoast SEO Premium allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Yoast SEO Premium: from n/a through 26.6.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Yoast SEO Premium Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-40723
Subscriber Broken Access Control in Bricks Builder <= 2.1.4 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Bricks Builder Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-40724
CP Client Arbitrary File Download in Client Portal (Pro) <= 5.6.2 versions.

🎖@cveNotify
Patchstack
Arbitrary File Download in WordPress Client Portal (Pro) Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-40725
Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress WooCommerce Product Filters Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-40726
Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.14 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress User Registration Stripe Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-40731
Unauthenticated Local File Inclusion in ChapterOne <= 1.7 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress ChapterOne Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
11 views
CVE Notify
🚨 CVE-2026-40736
Unauthenticated PHP Object Injection in Laurits <= 1.5.1 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Laurits Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
11 views
CVE Notify
🚨 CVE-2026-40739
Unauthenticated PHP Object Injection in LuxeDrive <= 1.4 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress LuxeDrive Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-40746
Subscriber Arbitrary File Upload in Restaurant Zone <= 0.7.8 versions.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Restaurant Zone Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-40747
Subscriber Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Ecommerce Zone Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-40748
Subscriber Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Kids Gift Shop Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-40749
Subscriber Arbitrary File Upload in Charity Zone <= 1.1.1 versions.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Charity Zone Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-40751
Unauthenticated PHP Object Injection in Ashtanga <= 1.2 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Ashtanga Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-40753
Unauthenticated PHP Object Injection in EasyMeals <= 1.5.1 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress EasyMeals Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views