CVE Notify
@cveNotify
19.5K subscribers
4 photos
236K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.5K subscribers
CVE Notify
🚨 CVE-2026-65471
Unauthenticated Cross Site Request Forgery (CSRF) in Avada Core <= 5.15.6 versions.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress Avada Core Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-65472
Unauthenticated Broken Access Control in Kit (formerly ConvertKit) <= 3.3.5 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Kit (formerly ConvertKit) Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views
CVE Notify
🚨 CVE-2026-65473
Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Virtue/Ascend/Pinnacle Toolkit Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views
CVE Notify
🚨 CVE-2026-65474
Unauthenticated Sensitive Data Exposure in Ninja Tables <= 5.2.10 versions.

🎖@cveNotify
Patchstack
Sensitive Data Exposure in WordPress Ninja Tables Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views
CVE Notify
🚨 CVE-2026-65475
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Image Gallery allows Stored XSS.

This issue affects Modula Image Gallery: from 2.14.25 through 2.14.30.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Modula Image Gallery Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views
CVE Notify
🚨 CVE-2026-65476
Unauthenticated Broken Access Control in Civi <= 2.2.4 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Civi Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-65477
Contributor Local File Inclusion in Tonda Core <= 2.1.2 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Tonda Core Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-65478
Subscriber Broken Access Control in ListingPro <= 2.9.10 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress ListingPro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
1 view
CVE Notify
🚨 CVE-2026-65479
Subscriber Broken Access Control in Reviewer <= 3.14.2 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Reviewer Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views
CVE Notify
🚨 CVE-2026-65480
Contributor Cross Site Scripting (XSS) in TheGem <= 5.11.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress TheGem Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
2 views
CVE Notify
🚨 CVE-2026-65481
Contributor Local File Inclusion in Vino <= 1.9 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Vino Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-65482
Contributor Cross Site Scripting (XSS) in LA-Studio Element Kit for Elementor <= 1.6.2 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress LA-Studio Element Kit for Elementor Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-65483
Author Cross Site Scripting (XSS) in HashThemes Demo Importer <= 1.4.2 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress HashThemes Demo Importer Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-65484
Contributor Broken Access Control in Style Kits <= 2.6.5 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Style Kits Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-65485
Unauthenticated Broken Access Control in Content Control <= 2.6.5 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Content Control Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-65486
Unauthenticated Broken Access Control in Event post <= 6.0.1 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Event post Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-65487
Unauthenticated Broken Access Control in Photography <= 7.7.6 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Photography Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-65488
Unauthenticated Cross Site Request Forgery (CSRF) in LA-Studio Element Kit for Elementor <= 1.6.2 versions.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress LA-Studio Element Kit for Elementor Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-65489
Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor <= 1.6.2 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress LA-Studio Element Kit for Elementor Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-65490
Unauthenticated Sensitive Data Exposure in Create by Mediavine <= 2.5.3 versions.

🎖@cveNotify
Patchstack
Sensitive Data Exposure in WordPress Create by Mediavine Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-65492
Unauthenticated Cross Site Scripting (XSS) in Dokan Pro <= 5.0.0 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Dokan Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views