CVE Notify
@cveNotify
19.5K subscribers
4 photos
237K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.5K subscribers
CVE Notify
🚨 CVE-2026-57428
Unauthenticated Cross Site Scripting (XSS) in Sprout Clients <= 3.2.3 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Sprout Clients Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views
CVE Notify
🚨 CVE-2026-57626
Cross-Site Request Forgery (CSRF) vulnerability in MailPoet allows Cross Site Request Forgery.

This issue affects MailPoet: from 5.30.0 through 5.33.0.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress MailPoet Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-57696
Contributor Arbitrary File Deletion in Picture Gallery <= 1.6.5 versions.

🎖@cveNotify
Patchstack
Arbitrary File Deletion in WordPress Picture Gallery Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-57701
Unauthenticated Cross Site Scripting (XSS) in Real Estate Manager Pro <= 12.8.5 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Real Estate Manager Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-57703
Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Sunshine Photo Cart Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-57704
Unauthenticated Cross Site Scripting (XSS) in Smart Manager <= 8.90.0 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Smart Manager Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-57716
Unauthenticated Arbitrary File Deletion in Broadcast Live Video <= 7.2.4 versions.

🎖@cveNotify
Patchstack
Arbitrary File Deletion in WordPress Broadcast Live Video Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-57717
Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Knit Pay Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-57735
Unauthenticated Cross Site Scripting (XSS) in Breakdance <= 2.7.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Breakdance Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-57767
Unauthenticated Cross Site Scripting (XSS) in WP Google Maps Pro <= 10.1.02 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress WP Google Maps Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-57769
Unauthenticated Cross Site Scripting (XSS) in Grand Photography <= 5.7.8 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Grand Photography Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-57784
Unauthenticated Cross Site Request Forgery (CSRF) in Ninja Forms File Uploads Extension <= 3.3.26 versions.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress Ninja Forms File Uploads Extension Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-57785
Unauthenticated Cross Site Request Forgery (CSRF) in ApusListing <= 1.2.63 versions.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress ApusListing Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-57808
Subscriber Arbitrary Content Deletion in WP EasyPay <= 4.5.0 versions.

🎖@cveNotify
Patchstack
Arbitrary Content Deletion in WordPress WP EasyPay Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-57809
Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.34.0 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress AffiliateWP Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-59512
Unauthenticated Cross Site Scripting (XSS) in Product Enquiry for WooCommerce <= 2.2.34.43 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Product Enquiry for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-59513
Subscriber Cross Site Scripting (XSS) in Masteriyo - LMS <= 2.3.0 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Masteriyo - LMS Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-59514
Unauthenticated SQL Injection in Buddyboss Platform <= 3.0.5 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Buddyboss Platform Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-59517
Unauthenticated Cross Site Scripting (XSS) in Easy Form Builder <= 4.0.12 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Easy Form Builder Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-59522
Subscriber Broken Access Control in WP ERP <= 1.17.5 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress WP ERP Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-59524
Unauthenticated Broken Authentication in Easy Digital Downloads <= 3.6.7 versions.

🎖@cveNotify
Patchstack
Broken Authentication in WordPress Easy Digital Downloads Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
10 views