CVE Notify
@cveNotify
19.5K subscribers
4 photos
237K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.5K subscribers
CVE Notify
🚨 CVE-2026-27399
Unauthenticated Broken Access Control in MarketKing <= 2.1.40 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress MarketKing Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-27403
Contributor Cross Site Scripting (XSS) in Hubbub Lite <= 1.36.3 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Hubbub Lite Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-27418
Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress WP Fast Total Search Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-27422
Unauthenticated Broken Access Control in YT Player <= 2.0.9 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress YT Player Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-27423
Subscriber Broken Access Control in Participants Database <= 2.7.8.4 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Participants Database Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-57367
Subscriber Broken Access Control in WP Booking System < 5.12.8.1 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress WP Booking System Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-57370
Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.9.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Visitor Traffic Real Time Statistics Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-57373
Customer Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.4 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Funnel Kit Funnel Builder PRO Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views
CVE Notify
🚨 CVE-2026-57374
Unauthenticated Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.7 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Funnel Kit Funnel Builder PRO Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views
CVE Notify
🚨 CVE-2026-57384
Subscriber Cross Site Scripting (XSS) in WishList Member X <= 3.32.0 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress WishList Member X Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views
CVE Notify
🚨 CVE-2026-57397
Unauthenticated Cross Site Scripting (XSS) in Coaching <= 3.9.2 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Coaching Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views
CVE Notify
🚨 CVE-2026-57425
Unauthenticated Broken Access Control in Autopay dla WooCommerce <= 2.2.27 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Autopay dla WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views
CVE Notify
🚨 CVE-2026-57427
Unauthenticated Cross Site Scripting (XSS) in Download Monitor - WPForms Lock <= 1.0.4 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Download Monitor - WPForms Lock Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views
CVE Notify
🚨 CVE-2026-57428
Unauthenticated Cross Site Scripting (XSS) in Sprout Clients <= 3.2.3 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Sprout Clients Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views
CVE Notify
🚨 CVE-2026-57626
Cross-Site Request Forgery (CSRF) vulnerability in MailPoet allows Cross Site Request Forgery.

This issue affects MailPoet: from 5.30.0 through 5.33.0.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress MailPoet Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-57696
Contributor Arbitrary File Deletion in Picture Gallery <= 1.6.5 versions.

🎖@cveNotify
Patchstack
Arbitrary File Deletion in WordPress Picture Gallery Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-57701
Unauthenticated Cross Site Scripting (XSS) in Real Estate Manager Pro <= 12.8.5 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Real Estate Manager Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-57703
Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Sunshine Photo Cart Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-57704
Unauthenticated Cross Site Scripting (XSS) in Smart Manager <= 8.90.0 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Smart Manager Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-57716
Unauthenticated Arbitrary File Deletion in Broadcast Live Video <= 7.2.4 versions.

🎖@cveNotify
Patchstack
Arbitrary File Deletion in WordPress Broadcast Live Video Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-57717
Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Knit Pay Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views