CVE Notify
@cveNotify
19.5K subscribers
4 photos
236K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.5K subscribers
CVE Notify
🚨 CVE-2026-25466
Unauthenticated Broken Access Control in WP Go Maps <= 10.1.04 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress WP Go Maps Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-27064
Editor Arbitrary File Upload in Mailster <= 4.1.17 versions.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Mailster Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-27372
Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions.

🎖@cveNotify
Patchstack
Sensitive Data Exposure in WordPress PeproDev Ultimate Invoice Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-27377
Booking Agent Broken Access Control in QuickCal - Appointment Booking Calendar for WordPress <= 1.0.16 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress QuickCal - Appointment Booking Calendar for WordPress Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-27391
Subscriber Broken Access Control in uListing <= 2.2.0 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress uListing Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-27392
Contributor Broken Access Control in uListing <= 2.2.0 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress uListing Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-27399
Unauthenticated Broken Access Control in MarketKing <= 2.1.40 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress MarketKing Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-27403
Contributor Cross Site Scripting (XSS) in Hubbub Lite <= 1.36.3 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Hubbub Lite Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-27418
Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress WP Fast Total Search Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-27422
Unauthenticated Broken Access Control in YT Player <= 2.0.9 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress YT Player Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-27423
Subscriber Broken Access Control in Participants Database <= 2.7.8.4 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Participants Database Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-57367
Subscriber Broken Access Control in WP Booking System < 5.12.8.1 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress WP Booking System Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-57370
Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.9.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Visitor Traffic Real Time Statistics Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-57373
Customer Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.4 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Funnel Kit Funnel Builder PRO Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views
CVE Notify
🚨 CVE-2026-57374
Unauthenticated Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.7 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Funnel Kit Funnel Builder PRO Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views
CVE Notify
🚨 CVE-2026-57384
Subscriber Cross Site Scripting (XSS) in WishList Member X <= 3.32.0 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress WishList Member X Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views
CVE Notify
🚨 CVE-2026-57397
Unauthenticated Cross Site Scripting (XSS) in Coaching <= 3.9.2 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Coaching Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views
CVE Notify
🚨 CVE-2026-57425
Unauthenticated Broken Access Control in Autopay dla WooCommerce <= 2.2.27 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Autopay dla WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views
CVE Notify
🚨 CVE-2026-57427
Unauthenticated Cross Site Scripting (XSS) in Download Monitor - WPForms Lock <= 1.0.4 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Download Monitor - WPForms Lock Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views
CVE Notify
🚨 CVE-2026-57428
Unauthenticated Cross Site Scripting (XSS) in Sprout Clients <= 3.2.3 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Sprout Clients Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views
CVE Notify
🚨 CVE-2026-57626
Cross-Site Request Forgery (CSRF) vulnerability in MailPoet allows Cross Site Request Forgery.

This issue affects MailPoet: from 5.30.0 through 5.33.0.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress MailPoet Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views