CVE Notify
@cveNotify
19.5K subscribers
4 photos
237K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.5K subscribers
CVE Notify
๐Ÿšจ CVE-2026-61945
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retrieve Embedded Sensitive Data.

This issue affects WooCommerce Product Stock Alert: from n/a through 3.0.6.

๐ŸŽ–@cveNotify
Patchstack
Sensitive Data Exposure in WordPress WooCommerce Product Stock Alert Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
๐Ÿšจ CVE-2026-61946
Unauthenticated Insecure Direct Object References (IDOR) in Easy Appointments <= 3.12.27 versions.

๐ŸŽ–@cveNotify
Patchstack
Insecure Direct Object References (IDOR) in WordPress Easy Appointments Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
๐Ÿšจ CVE-2026-61947
Unauthenticated Cross Site Scripting (XSS) in Form Vibes โ€“ Database Manager for Forms <= 1.5.2 versions.

๐ŸŽ–@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Form Vibes โ€“ Database Manager for Forms Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
๐Ÿšจ CVE-2026-61948
Unauthenticated SQL Injection in WPDM โ€“ Premium Packages <= 6.2.0 versions.

๐ŸŽ–@cveNotify
Patchstack
SQL Injection in WordPress WPDM โ€“ Premium Packages Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
๐Ÿšจ CVE-2026-61949
Unauthenticated SQL Injection in Bookly <= 27.7 versions.

๐ŸŽ–@cveNotify
Patchstack
SQL Injection in WordPress Bookly Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
๐Ÿšจ CVE-2026-61950
Unauthenticated SQL Injection in TrueBooker <= 1.2.3 versions.

๐ŸŽ–@cveNotify
Patchstack
SQL Injection in WordPress TrueBooker Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
๐Ÿšจ CVE-2026-61951
Unauthenticated Privilege Escalation in TrueBooker <= 1.2.3 versions.

๐ŸŽ–@cveNotify
Patchstack
Privilege Escalation in WordPress TrueBooker Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
๐Ÿšจ CVE-2026-61954
Unauthenticated Broken Access Control in PayU India <= 3.8.9 versions.

๐ŸŽ–@cveNotify
Patchstack
Broken Access Control in WordPress PayU India Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
๐Ÿšจ CVE-2026-61972
Unauthenticated Broken Access Control in ShopLentor Pro <= 2.8.5 versions.

๐ŸŽ–@cveNotify
Patchstack
undefined in undefined undefined undefined
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
๐Ÿšจ CVE-2026-61973
Subscriber Broken Access Control in ShopLentor Pro <= 2.8.5 versions.

๐ŸŽ–@cveNotify
Patchstack
undefined in undefined undefined undefined
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
๐Ÿšจ CVE-2026-65449
Contributor Cross Site Scripting (XSS) in MapSVG <= 8.14.0 versions.

๐ŸŽ–@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress MapSVG Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
๐Ÿšจ CVE-2026-65450
Contributor SQL Injection in MapSVG <= 8.14.0 versions.

๐ŸŽ–@cveNotify
Patchstack
SQL Injection in WordPress MapSVG Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
๐Ÿšจ CVE-2026-65451
Contributor SQL Injection in MapSVG <= 8.14.0 versions.

๐ŸŽ–@cveNotify
Patchstack
SQL Injection in WordPress MapSVG Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
๐Ÿšจ CVE-2026-65452
Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.

๐ŸŽ–@cveNotify
Patchstack
Broken Access Control in WordPress Ebook Store Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
๐Ÿšจ CVE-2026-65453
Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.

๐ŸŽ–@cveNotify
Patchstack
Broken Access Control in WordPress Ebook Store Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
๐Ÿšจ CVE-2026-65454
Contributor SQL Injection in Quiz And Survey Master <= 11.2.0 versions.

๐ŸŽ–@cveNotify
Patchstack
SQL Injection in WordPress Quiz And Survey Master Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
๐Ÿšจ CVE-2026-65455
Administrator Arbitrary File Upload in MapSVG <= 8.14.0 versions.

๐ŸŽ–@cveNotify
Patchstack
Arbitrary File Upload in WordPress MapSVG Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
๐Ÿšจ CVE-2026-65456
Contributor Insecure Direct Object References (IDOR) in Product Slider for WooCommerce <= 1.13.62 versions.

๐ŸŽ–@cveNotify
Patchstack
Insecure Direct Object References (IDOR) in WordPress Product Slider for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
๐Ÿšจ CVE-2026-65457
Subscriber Broken Access Control in ะฎKassa ะดะปั WooCommerce <= 2.16.1 versions.

๐ŸŽ–@cveNotify
Patchstack
Broken Access Control in WordPress ะฎKassa ะดะปั WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
๐Ÿšจ CVE-2026-65458
Contributor Sensitive Data Exposure in Polylang <= 3.8.5 versions.

๐ŸŽ–@cveNotify
Patchstack
Sensitive Data Exposure in WordPress Polylang Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
๐Ÿšจ CVE-2026-65460
Unauthenticated Cross Site Request Forgery (CSRF) in Zarinpal Gateway <= 5.1.0 versions.

๐ŸŽ–@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress Zarinpal Gateway Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views