CVE Notify
@cveNotify
19.3K subscribers
4 photos
205K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.3K subscribers
CVE Notify
🚨 CVE-2026-57366
Unauthenticated Cross Site Scripting (XSS) in WPAdverts <= 2.3.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress WPAdverts Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-57426
Unauthenticated Cross Site Scripting (XSS) in Modula - PRO <= 2.10.8 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Modula - PRO Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-57621
Unauthenticated PHP Object Injection in Booktics <= 1.0.21 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Booktics Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-57623
Unauthenticated Arbitrary Code Execution in W3 Total Cache <= 2.9.4 versions.

🎖@cveNotify
Patchstack
Arbitrary Code Execution in WordPress W3 Total Cache Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
13 views
CVE Notify
🚨 CVE-2026-57624
Unauthenticated Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.46 versions.

🎖@cveNotify
Patchstack
Remote Code Execution (RCE) in WordPress Blocksy Companion Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
16 views
CVE Notify
🚨 CVE-2026-57625
Unauthenticated Cross Site Scripting (XSS) in Admin and Site Enhancements (ASE) Pro <= 8.8.5 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Admin and Site Enhancements (ASE) Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-57669
Subscriber Broken Access Control in Advanced Contact form 7 DB <= 2.0.9 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Advanced Contact form 7 DB Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-57671
Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.4 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress perfmatters Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-57672
Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 6.5.1.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress wpDataTables Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-57673
Unauthenticated Cross Site Scripting (XSS) in Optimole <= 4.2.7 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Optimole Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-57674
Unauthenticated Cross Site Scripting (XSS) in Timetics <= 1.0.58 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Timetics Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-57675
Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.2.02.004 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress WP Photo Album Plus Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-57677
Unauthenticated PHP Object Injection in Novalnet Payment Gateway for WooCommerce <= 12.10.3 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Novalnet Payment Gateway for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-57678
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemePunch Slider Revolution allows Reflected XSS.

This issue affects Slider Revolution: from 7.0.0 through 7.0.16.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Slider Revolution Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-57679
Unauthenticated SQL Injection in GeekyBot <= 1.2.5 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress GeekyBot Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-57680
Unauthenticated Insecure Direct Object References (IDOR) in Kirki <= 6.0.11 versions.

🎖@cveNotify
Patchstack
Insecure Direct Object References (IDOR) in WordPress Kirki Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-57681
Subscriber Server Side Request Forgery (SSRF) in GeoDirectory <= 2.8.161 versions.

🎖@cveNotify
Patchstack
Server Side Request Forgery (SSRF) in WordPress GeoDirectory Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
17 views
CVE Notify
🚨 CVE-2026-57682
Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= 15.0.5 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Simple Link Directory Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
18 views
CVE Notify
🚨 CVE-2026-57683
Unauthenticated SQL Injection in WP Fast Total Search <= 1.80.280 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress WP Fast Total Search Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-57684
Contributor Cross Site Scripting (XSS) in TheFox <= 3.9.70 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress TheFox Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-57685
Subscriber Broken Access Control in Martfury - WooCommerce Marketplace WordPress Theme <= 3.2.8 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Martfury - WooCommerce Marketplace WordPress Theme Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views