CVE Notify
@cveNotify
19.3K subscribers
4 photos
204K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.3K subscribers
CVE Notify
🚨 CVE-2025-69155
Unauthenticated Cross Site Scripting (XSS) in Fitness Zone WordPress Theme <= 5.7 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Fitness Zone WordPress Theme Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2025-69156
Unauthenticated Cross Site Scripting (XSS) in Kids Zone - Children WordPress Theme <= 5.4 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Kids Zone - Children WordPress Theme Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-11946
An unauthenticated remote attacker can exhaust
server memory via the GetEndpoints Discovery Service in open62541. The
endpointUrl field of GetEndpointsRequest is not validated for length. An
attacker can declare an arbitrarily large string (up to ~4.09 GB via the UInt32
length field) delivered across intermediate chunks without ever sending the
final chunk. The server buffers all chunks in RAM indefinitely until the
SecureChannel times out. The attack is
pre-session and bypasses all encryption configurations.



The issue affects open62541: from 1.4.0 through 1.4.16, from 1.5.0 through 1.5.4, master.

🎖@cveNotify
GitHub
GitHub - open62541/open62541: Open source implementation of OPC UA (OPC Unified Architecture) aka IEC 62541 licensed under Mozilla…
Open source implementation of OPC UA (OPC Unified Architecture) aka IEC 62541 licensed under Mozilla Public License v2.0 - open62541/open62541
5 views
CVE Notify
🚨 CVE-2026-14449
u5CMS through v12.8.8 is vulnerable to reflected XSS via the ‘thanks’ parameter in multiple form components

🎖@cveNotify
GitHub
Release u5cms-12.8.9 · u5cms/u5cms
What's Changed
This release fixes CVE-2026-14449.

Thanks xss fix by @stemind in #177

Full Changelog: v12.8.8...v12.8.9
9 views
CVE Notify
🚨 CVE-2026-27060
Contributor PHP Object Injection in ARMember Premium <= 7.0 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress ARMember Premium Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
11 views
CVE Notify
🚨 CVE-2026-27404
Unauthenticated Cross Site Scripting (XSS) in LMS <= 9.7 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress LMS Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-27408
Unauthenticated Cross Site Scripting (XSS) in NativeChurch <= 4.8.8.2 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress NativeChurch Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-27412
Unauthenticated Local File Inclusion in Pearl - Corporate Business <= 3.4.10 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Pearl - Corporate Business Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-27414
Contributor PHP Object Injection in Werkstatt <= 4.8.3 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Werkstatt Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-27419
Subscriber Arbitrary File Upload in Zegen <= 1.1.9 versions.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Zegen Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-27425
Unauthenticated Cross Site Scripting (XSS) in Automotive Listings <= 18.6 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Automotive Listings Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-27426
Unauthenticated Cross Site Scripting (XSS) in Automotive Car Dealership Business <= 13.3.3 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Automotive Car Dealership Business Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-27430
Unauthenticated Cross Site Scripting (XSS) in TheFox <= 3.9.76 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress TheFox Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-27433
Unauthenticated Broken Access Control in Motors <= 5.6.80 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Motors Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-27436
Editor Arbitrary Code Execution in Five Star Business Profile and Schema <= 2.3.19 versions.

🎖@cveNotify
Patchstack
Arbitrary Code Execution in WordPress Five Star Business Profile and Schema Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-39448
Unauthenticated Broken Access Control in NOWPayments for WooCommerce <= 1.4.0 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress NOWPayments for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-42382
Unauthenticated Local File Inclusion in Audrey <= 1.5 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Audrey Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-49779
Customer Path Traversal in Tax Exempt for WooCommerce <= 1.9.3 versions.

🎖@cveNotify
Patchstack
Path Traversal in WordPress Tax Exempt for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-56037
Deserialization of Untrusted Data vulnerability in Themify Themify Popup allows Object Injection.

This issue affects Themify Popup: from n/a through 1.4.3.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Themify Popup Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-57342
Subscriber Cross Site Scripting (XSS) in ShortPixel Adaptive Images <= 3.11.3 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress ShortPixel Adaptive Images Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-57343
Unauthenticated Cross Site Scripting (XSS) in Real Estate 7 <= 3.5.9 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Real Estate 7 Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views