CVE Notify
@cveNotify
19.7K subscribers
4 photos
301K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.7K subscribers
CVE Notify
🚨 CVE-2026-66663
Unauthenticated Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress WP Data Access Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-66664
Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.0 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress SEO Plugin by Squirrly SEO Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-66665
Unauthenticated Arbitrary File Upload in Type Hub <= 2.0.6 versions.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Type Hub Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-66678
Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field <= 6.1.1 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Advanced Custom Fields: Font Awesome Field Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-66681
Unauthenticated Cross Site Request Forgery (CSRF) in Theme My Login <= 7.1.14 versions.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress Theme My Login Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-66683
Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript <= 2.0.16 versions.

🎖@cveNotify
Patchstack
Sensitive Data Exposure in WordPress Custom CSS and JavaScript Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-66684
Unauthenticated Sensitive Data Exposure in Export Import Menus <= 1.9.2 versions.

🎖@cveNotify
Patchstack
Sensitive Data Exposure in WordPress Export Import Menus Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-66685
Unauthenticated Sensitive Data Exposure in Featured Video Plus <= 2.3.3 versions.

🎖@cveNotify
Patchstack
Sensitive Data Exposure in WordPress Featured Video Plus Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-66686
Unauthenticated Cross Site Request Forgery (CSRF) in Plugins Garbage Collector (Database Cleanup) <= 0.14 versions.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress Plugins Garbage Collector (Database Cleanup) Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-66688
Contributor Cross Site Scripting (XSS) in Ultimate Addons for Elementor <= 1.45.2 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Ultimate Addons for Elementor Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-66690
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.5 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress GiveWP Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-66692
Customer Insecure Direct Object References (IDOR) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.10.0 versions.

🎖@cveNotify
Patchstack
Insecure Direct Object References (IDOR) in WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-66694
Unauthenticated Cross Site Scripting (XSS) in Thrive Architect <= 10.9.3.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Thrive Architect Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-66695
Unauthenticated Path Traversal in W3 Total Cache <= 2.10.2 versions.

🎖@cveNotify
Patchstack
Path Traversal in WordPress W3 Total Cache Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-66696
Contributor Sensitive Data Exposure in Gutenberg Blocks by Kadence Blocks <= 3.7.8 versions.

🎖@cveNotify
Patchstack
Sensitive Data Exposure in WordPress Gutenberg Blocks by Kadence Blocks Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-66699
Custom role Broken Access Control in Dokan <= 5.0.10 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Dokan Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-66702
Unauthenticated Cross Site Scripting (XSS) in Rank Math SEO <= 1.0.274.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Rank Math SEO Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-66703
Contributor Cross Site Scripting (XSS) in MailOptin <= 1.2.78.0 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress MailOptin Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-66705
Unauthenticated Cross Site Scripting (XSS) in Facebook for WordPress <= 5.2.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Facebook for WordPress Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-66706
Author Cross Site Scripting (XSS) in Subscribe to Comments <= 2.3.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Subscribe to Comments Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-66707
Unauthenticated Cross Site Scripting (XSS) in Facebook for WooCommerce <= 3.7.5 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Facebook for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views