CVE Notify
@cveNotify
19.1K subscribers
4 photos
185K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.1K subscribers
CVE Notify
🚨 CVE-2026-22342
Unauthenticated Cross Site Request Forgery (CSRF) in WordPress Dating Theme <= 11.2.0 versions.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress WordPress Dating Theme Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-24610
Subscriber Broken Access Control in MetForm Pro <= 3.9.1 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress MetForm Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-24611
Unauthenticated Broken Access Control in MetForm Pro <= 3.9.1 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress MetForm Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-25446
Subscriber Arbitrary File Upload in WishList Member X <= 3.29.0 versions.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress WishList Member X Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-27410
Unauthenticated Deserialization of untrusted data in Slimstat Analytics < 5.4.0 versions.

🎖@cveNotify
Patchstack
Deserialization of untrusted data in WordPress Slimstat Analytics Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-32966
DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apache DolphinScheduler.

This issue affects Apache DolphinScheduler: before 3.4.2.

Users are recommended to upgrade to version 3.4.2, which fixes the issue.

🎖@cveNotify
9 views
CVE Notify
🚨 CVE-2026-32967
Incorrect Authorization vulnerability of `/v2` experimental interface in Apache DolphinScheduler.

This issue affects Apache DolphinScheduler: before 3.4.2.

Users are recommended to upgrade to version 3.4.2, which fixes the issue.

🎖@cveNotify
8 views
CVE Notify
🚨 CVE-2026-34888
Unauthenticated Sensitive Data Exposure in Bricksforge <= 3.1.8.4 versions.

🎖@cveNotify
Patchstack
Sensitive Data Exposure in WordPress Bricksforge Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-39545
Unauthenticated PHP Object Injection in Zermatt <= 1.6.1 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Zermatt Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-39573
Unauthenticated PHP Object Injection in Mildhill <= 1.5 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Mildhill Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-39582
Unauthenticated Local File Inclusion in Hitek < 1.8.3 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Hitek Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-39595
Author Broken Access Control in W3 Total Cache <= 2.9.1 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress W3 Total Cache Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-40721
Contributor Local File Inclusion in Element Pack Pro <= 9.0.6 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Element Pack Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-40723
Subscriber Broken Access Control in Bricks Builder <= 2.1.4 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Bricks Builder Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-40735
Unauthenticated PHP Object Injection in Reina <= 2.1 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Reina Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
11 views
CVE Notify
🚨 CVE-2026-40746
Subscriber Arbitrary File Upload in Restaurant Zone <= 0.7.8 versions.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Restaurant Zone Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-40748
Subscriber Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Kids Gift Shop Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-40765
Unauthenticated Cross Site Scripting (XSS) in collectchat <= 2.4.9 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress collectchat Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-40768
Unauthenticated Insecure Direct Object References (IDOR) in Salon booking system <= 10.30.24 versions.

🎖@cveNotify
Patchstack
Insecure Direct Object References (IDOR) in WordPress Salon booking system Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-41557
Unauthenticated Cross Site Scripting (XSS) in Kapee < 1.7.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Kapee Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-42357
Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have permission to access.

This issue affects Apache DolphinScheduler versions prior to 3.4.2.


Users are recommended to upgrade to version 3.4.2, which fixes this issue.

🎖@cveNotify
8 views