CVE Notify
@cveNotify
19.1K subscribers
4 photos
185K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.1K subscribers
CVE Notify
🚨 CVE-2026-22329
Unauthenticated Cross Site Scripting (XSS) in Skillate <= 1.2.10 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Skillate Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-22330
Unauthenticated Local File Inclusion in Right Way <= 4.0 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Right Way Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-22332
Unauthenticated SQL Injection in Tutor LMS Pro <= 3.9.6 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Tutor LMS Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-22338
Unauthenticated Local File Inclusion in EcoBlue <= 1.15 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress EcoBlue Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-22339
Unauthenticated Cross Site Scripting (XSS) in WPJobster <= 6.3.5 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress WPJobster Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-22342
Unauthenticated Cross Site Request Forgery (CSRF) in WordPress Dating Theme <= 11.2.0 versions.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress WordPress Dating Theme Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-24610
Subscriber Broken Access Control in MetForm Pro <= 3.9.1 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress MetForm Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-24611
Unauthenticated Broken Access Control in MetForm Pro <= 3.9.1 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress MetForm Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-25446
Subscriber Arbitrary File Upload in WishList Member X <= 3.29.0 versions.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress WishList Member X Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-27410
Unauthenticated Deserialization of untrusted data in Slimstat Analytics < 5.4.0 versions.

🎖@cveNotify
Patchstack
Deserialization of untrusted data in WordPress Slimstat Analytics Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-32966
DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apache DolphinScheduler.

This issue affects Apache DolphinScheduler: before 3.4.2.

Users are recommended to upgrade to version 3.4.2, which fixes the issue.

🎖@cveNotify
9 views
CVE Notify
🚨 CVE-2026-32967
Incorrect Authorization vulnerability of `/v2` experimental interface in Apache DolphinScheduler.

This issue affects Apache DolphinScheduler: before 3.4.2.

Users are recommended to upgrade to version 3.4.2, which fixes the issue.

🎖@cveNotify
8 views
CVE Notify
🚨 CVE-2026-34888
Unauthenticated Sensitive Data Exposure in Bricksforge <= 3.1.8.4 versions.

🎖@cveNotify
Patchstack
Sensitive Data Exposure in WordPress Bricksforge Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-39545
Unauthenticated PHP Object Injection in Zermatt <= 1.6.1 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Zermatt Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-39573
Unauthenticated PHP Object Injection in Mildhill <= 1.5 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Mildhill Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-39582
Unauthenticated Local File Inclusion in Hitek < 1.8.3 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Hitek Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-39595
Author Broken Access Control in W3 Total Cache <= 2.9.1 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress W3 Total Cache Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-40721
Contributor Local File Inclusion in Element Pack Pro <= 9.0.6 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Element Pack Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-40723
Subscriber Broken Access Control in Bricks Builder <= 2.1.4 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Bricks Builder Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-40735
Unauthenticated PHP Object Injection in Reina <= 2.1 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Reina Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
11 views
CVE Notify
🚨 CVE-2026-40746
Subscriber Arbitrary File Upload in Restaurant Zone <= 0.7.8 versions.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Restaurant Zone Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views