CVE Notify
@cveNotify
19.3K subscribers
4 photos
206K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.3K subscribers
CVE Notify
🚨 CVE-2026-57746
Subscriber Broken Access Control in Booked <= 3.0.0 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Booked Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
19 views
CVE Notify
🚨 CVE-2026-57747
Unauthenticated Cross Site Request Forgery (CSRF) in Booked <= 3.0.0 versions.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress Booked Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
13 views
CVE Notify
🚨 CVE-2026-57748
Contributor Local File Inclusion in Shopify <= 1.0.0 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Shopify Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
12 views
CVE Notify
🚨 CVE-2026-57749
Contributor Local File Inclusion in SportsPress Pro <= 2.7.29 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress SportsPress Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
14 views
CVE Notify
🚨 CVE-2026-57750
Unauthenticated Broken Access Control in ez Form Calculator Premium <= 2.14.1.2 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress ez Form Calculator Premium Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
12 views
CVE Notify
🚨 CVE-2026-57751
Unauthenticated Cross Site Request Forgery (CSRF) in Heateor Social Login <= 1.1.39 versions.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress Heateor Social Login Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
12 views
CVE Notify
🚨 CVE-2026-57752
Contributor SQL Injection in iNET Webkit 1.2.4 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress iNET Webkit Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
12 views
CVE Notify
🚨 CVE-2026-57753
Unauthenticated Sensitive Data Exposure in Kit (formerly ConvertKit) for WooCommerce <= 2.1.5 versions.

🎖@cveNotify
Patchstack
Sensitive Data Exposure in WordPress Kit (formerly ConvertKit) for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
12 views
CVE Notify
🚨 CVE-2026-57754
Contributor Cross Site Scripting (XSS) in Livemesh Addons for WPBakery Page Builder <= 3.9.4 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Livemesh Addons for WPBakery Page Builder Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
15 views
CVE Notify
🚨 CVE-2026-57755
Contributor Cross Site Scripting (XSS) in Mosaic Gallery &#8211; Advanced Gallery <= 1.2.0 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Mosaic Gallery – Advanced Gallery Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
14 views
CVE Notify
🚨 CVE-2026-57756
Contributor SQL Injection in nicen-localize-image <= 1.4.9 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress nicen-localize-image Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
14 views
CVE Notify
🚨 CVE-2026-57757
Unauthenticated Cross Site Request Forgery (CSRF) in pCloud WP Backup <= 2.0.2 versions.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress pCloud WP Backup Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
14 views
CVE Notify
🚨 CVE-2026-57758
Unauthenticated Cross Site Request Forgery (CSRF) in Permalink Manager for WooCommerce <= 1.0.8.2 versions.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress Permalink Manager for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
17 views
CVE Notify
🚨 CVE-2026-57759
Unauthenticated Cross Site Request Forgery (CSRF) in ProfileGrid <= 5.9.9.7 versions.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress ProfileGrid Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
27 views
CVE Notify
🚨 CVE-2026-57760
Missing Authorization vulnerability in Sendcloud Sendcloud Shipping allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Sendcloud Shipping: from n/a through 1.0.29.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Sendcloud Shipping Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
23 views
CVE Notify
🚨 CVE-2026-57761
Unauthenticated Cross Site Request Forgery (CSRF) in SEOWP <= 3.12.2 versions.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress SEOWP Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
30 views
CVE Notify
🚨 CVE-2026-57762
Author Cross Site Scripting (XSS) in Simple URLs <= 151 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Simple URLs Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
47 views
CVE Notify
🚨 CVE-2026-57763
Contributor Cross Site Scripting (XSS) in Structured Content <= 1.7.0 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Structured Content Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
60 views
CVE Notify
🚨 CVE-2026-57764
Contributor Cross Site Scripting (XSS) in Surbma | Yoast SEO Breadcrumb Shortcode <= 1.2 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Surbma | Yoast SEO Breadcrumb Shortcode Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
96 views
CVE Notify
🚨 CVE-2026-57765
Contributor SQL Injection in WP EasyCart <= 5.9.0 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress WP EasyCart Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
117 views
CVE Notify
🚨 CVE-2026-57920
Peplink InControl 2 through 2.14.2 before 2026-06-03 allows use of a semicolon to bypass access-control rules for certain /rest/o/{orgId} endpoints.

🎖@cveNotify
99 views