CVE Notify
@cveNotify
19.7K subscribers
4 photos
302K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.7K subscribers
CVE Notify
🚨 CVE-2026-27535
Subscriber Broken Access Control in Solace Extra <= 1.6.0 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Solace Extra Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
12 views
CVE Notify
🚨 CVE-2026-27536
Unauthenticated Cross Site Scripting (XSS) in MailChimp Subscribe Forms <= 4.3.3 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress MailChimp Subscribe Forms Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
11 views
CVE Notify
🚨 CVE-2026-27537
Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.11.2 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Popup by Supsystic Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
11 views
CVE Notify
🚨 CVE-2026-27538
Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress WP Directory Kit Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-27539
Unauthenticated Cross Site Scripting (XSS) in Welcart e-Commerce <= 2.11.31 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Welcart e-Commerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-27543
Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions.

🎖@cveNotify
Patchstack
Privilege Escalation in WordPress MStore API Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-27544
Unauthenticated Remote Code Execution (RCE) in QA Analytics <= 5.2.0.0 versions.

🎖@cveNotify
Patchstack
Remote Code Execution (RCE) in WordPress QA Analytics Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-27999
Subscriber Broken Access Control in Tourfic <= 2.23.1 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Tourfic Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-28001
Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress WP Directory Kit Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-28002
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics allows Blind SQL Injection.

This issue affects Booktics: from n/a through 1.0.22.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Booktics Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-28003
Unauthenticated Cross Site Scripting (XSS) in Maspik – Spam blacklist <= 2.9.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Maspik – Spam blacklist Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-28004
Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Business Directory Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-28008
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 versions.

🎖@cveNotify
Patchstack
Broken Authentication in WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-28142
Unauthenticated SQL Injection in Web Directory Free <= 1.7.13 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Web Directory Free Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-28148
Unauthenticated Bypass Vulnerability in Headless Single Sign On <= 1.6 versions.

🎖@cveNotify
Patchstack
Bypass Vulnerability in WordPress Headless Single Sign On Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-28149
Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Headless Single Sign On Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-28155
Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions.

🎖@cveNotify
Patchstack
Insecure Direct Object References (IDOR) in WordPress Do Lasso Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-28156
Subscriber SQL Injection in Do Lasso <= 358 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Do Lasso Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-28157
Subscriber Path Traversal in Do Lasso <= 358 versions.

🎖@cveNotify
Patchstack
Path Traversal in WordPress Do Lasso Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-28158
Unauthenticated Cross Site Scripting (XSS) in Do Lasso <= 358 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Do Lasso Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-28161
Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions.

🎖@cveNotify
Patchstack
Privilege Escalation in WordPress Service Finder Booking Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views