CVE Notify
@cveNotify
19.4K subscribers
4 photos
206K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.4K subscribers
CVE Notify
🚨 CVE-2026-56043
Unauthenticated Cross Site Scripting (XSS) in Customer Reviews for WooCommerce <= 5.110.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Customer Reviews for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-56044
Unauthenticated Cross Site Scripting (XSS) in Blog2Social <= 8.9.2 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Blog2Social Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-56045
Unauthenticated Cross Site Scripting (XSS) in Automatic < 3.135.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Automatic Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-56046
Subscriber Cross Site Scripting (XSS) in ListingPro <= 2.9.11 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress ListingPro Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-56047
Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.3 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress perfmatters Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-56048
Unauthenticated Insecure Direct Object References (IDOR) in Payment Gateway Based Fees and Discounts for WooCommerce <= 3.0.0 versions.

🎖@cveNotify
Patchstack
Insecure Direct Object References (IDOR) in WordPress Payment Gateway Based Fees and Discounts for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-56055
Subscriber PHP Object Injection in RealHomes <= 4.5.3 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress RealHomes Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-56057
Subscriber PHP Object Injection in Uncanny Automator Pro <= 7.3.0.6 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Uncanny Automator Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-56058
Subscriber Arbitrary File Upload in Quform <= 2.23.0 versions.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Quform Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-56059
Subscriber Arbitrary File Upload in Travel Booking <= 2.2.5 versions.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Travel Booking Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-56061
Unauthenticated Broken Access Control in Subscriptions for WooCommerce <= 1.9.5 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Subscriptions for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-56062
Unauthenticated SQL Injection in Quotes llama <= 3.1.5 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Quotes llama Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-56063
Unauthenticated Broken Access Control in MailChimp Block <= 1.1.15 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress MailChimp Block Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-56064
Subscriber SQL Injection in Tourfic <= 2.22.5 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Tourfic Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-56066
Unauthenticated Arbitrary File Deletion in ShortPixel Adaptive Images <= 3.11.4 versions.

🎖@cveNotify
Patchstack
Arbitrary File Deletion in WordPress ShortPixel Adaptive Images Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-56067
Unauthenticated SQL Injection in JetSmartFilters <= 3.8.3 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress JetSmartFilters Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-56068
Unauthenticated SQL Injection in JetEngine <= 3.8.10.2 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress JetEngine Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-56069
Unauthenticated Insecure Direct Object References (IDOR) in Toolset Forms <= 2.6.24 versions.

🎖@cveNotify
Patchstack
Insecure Direct Object References (IDOR) in WordPress Toolset Forms Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-56070
Unauthenticated SQL Injection in Advance Product Search <= 1.4.4 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Advance Product Search Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-56072
Unauthenticated Cross Site Scripting (XSS) in WoodMart <= 8.5.3 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress WoodMart Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-56773
Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass authorization checks. Attackers can read table schemas, create tables, and modify or delete records across bases and tables via endpoints like GET /api/v2/tables/get and POST /api/v2/tables/updateRecords.

🎖@cveNotify
GitHub
[sync] T4883 route CSV table imports through V2 by tea-artist · Pull Request #3285 · teableio/teable
🔄 Automated sync from EE repository.
29 commit(s) synced since last sync.
Authors

Aries X caoxing9@gmail.com
Boris boris2code@outlook.com
Jun Lu hammond@teable.io
SkyHuang sky.huang.fe@gmail.com
U...
6 views