CVE Notify
@cveNotify
19.3K subscribers
4 photos
205K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.3K subscribers
CVE Notify
🚨 CVE-2026-57672
Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 6.5.1.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress wpDataTables Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-57673
Unauthenticated Cross Site Scripting (XSS) in Optimole <= 4.2.7 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Optimole Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-57674
Unauthenticated Cross Site Scripting (XSS) in Timetics <= 1.0.58 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Timetics Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-57675
Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.2.02.004 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress WP Photo Album Plus Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-57677
Unauthenticated PHP Object Injection in Novalnet Payment Gateway for WooCommerce <= 12.10.3 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Novalnet Payment Gateway for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-57678
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemePunch Slider Revolution allows Reflected XSS.

This issue affects Slider Revolution: from 7.0.0 through 7.0.16.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Slider Revolution Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-57679
Unauthenticated SQL Injection in GeekyBot <= 1.2.5 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress GeekyBot Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-57680
Unauthenticated Insecure Direct Object References (IDOR) in Kirki <= 6.0.11 versions.

🎖@cveNotify
Patchstack
Insecure Direct Object References (IDOR) in WordPress Kirki Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-57681
Subscriber Server Side Request Forgery (SSRF) in GeoDirectory <= 2.8.161 versions.

🎖@cveNotify
Patchstack
Server Side Request Forgery (SSRF) in WordPress GeoDirectory Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
17 views
CVE Notify
🚨 CVE-2026-57682
Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= 15.0.5 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Simple Link Directory Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
18 views
CVE Notify
🚨 CVE-2026-57683
Unauthenticated SQL Injection in WP Fast Total Search <= 1.80.280 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress WP Fast Total Search Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-57684
Contributor Cross Site Scripting (XSS) in TheFox <= 3.9.70 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress TheFox Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-57685
Subscriber Broken Access Control in Martfury - WooCommerce Marketplace WordPress Theme <= 3.2.8 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Martfury - WooCommerce Marketplace WordPress Theme Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-57686
Unauthenticated Cross Site Scripting (XSS) in WowAddons <= 1.6.14 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress WowAddons Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-57687
Contributor SQL Injection in Custom Field Template <= 2.7.8 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Custom Field Template Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
11 views
CVE Notify
🚨 CVE-2026-57688
Unauthenticated Broken Access Control in POS Entegratör <= 3.7.103 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress POS Entegratör Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views
CVE Notify
🚨 CVE-2026-57689
Subscriber Broken Access Control in Werkstatt <= 4.7.2 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Werkstatt Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
11 views
CVE Notify
🚨 CVE-2026-57690
Unauthenticated Cross Site Request Forgery (CSRF) in Werkstatt <= 4.7.2 versions.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress Werkstatt Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
11 views
CVE Notify
🚨 CVE-2026-57730
Subscriber Broken Access Control in Flatsome <= 3.20.5 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Flatsome Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
18 views
CVE Notify
🚨 CVE-2026-57746
Subscriber Broken Access Control in Booked <= 3.0.0 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Booked Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
19 views
CVE Notify
🚨 CVE-2026-57747
Unauthenticated Cross Site Request Forgery (CSRF) in Booked <= 3.0.0 versions.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress Booked Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
13 views