🚨 CVE-2026-27539
Unauthenticated Cross Site Scripting (XSS) in Welcart e-Commerce <= 2.11.31 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in Welcart e-Commerce <= 2.11.31 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Welcart e-Commerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-27544
Unauthenticated Remote Code Execution (RCE) in QA Analytics <= 5.2.0.0 versions.
🎖@cveNotify
Unauthenticated Remote Code Execution (RCE) in QA Analytics <= 5.2.0.0 versions.
🎖@cveNotify
Patchstack
Remote Code Execution (RCE) in WordPress QA Analytics Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-28002
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics allows Blind SQL Injection.
This issue affects Booktics: from n/a through 1.0.22.
🎖@cveNotify
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics allows Blind SQL Injection.
This issue affects Booktics: from n/a through 1.0.22.
🎖@cveNotify
Patchstack
SQL Injection in WordPress Booktics Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-28003
Unauthenticated Cross Site Scripting (XSS) in Maspik – Spam blacklist <= 2.9.1 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in Maspik – Spam blacklist <= 2.9.1 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Maspik – Spam blacklist Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-28004
Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Business Directory Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-28008
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 versions.
🎖@cveNotify
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 versions.
🎖@cveNotify
Patchstack
Broken Authentication in WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-28148
Unauthenticated Bypass Vulnerability in Headless Single Sign On <= 1.6 versions.
🎖@cveNotify
Unauthenticated Bypass Vulnerability in Headless Single Sign On <= 1.6 versions.
🎖@cveNotify
Patchstack
Bypass Vulnerability in WordPress Headless Single Sign On Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-28149
Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.
🎖@cveNotify
Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.
🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Headless Single Sign On Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-28155
Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions.
🎖@cveNotify
Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions.
🎖@cveNotify
Patchstack
Insecure Direct Object References (IDOR) in WordPress Do Lasso Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-28161
Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions.
🎖@cveNotify
Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions.
🎖@cveNotify
Patchstack
Privilege Escalation in WordPress Service Finder Booking Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-28170
Unauthenticated Cross Site Scripting (XSS) in Blog Floating Button <= 1.4.20 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in Blog Floating Button <= 1.4.20 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Blog Floating Button Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-28173
Customer Arbitrary Content Deletion in WP Event SOlution <= 4.1.19 versions.
🎖@cveNotify
Customer Arbitrary Content Deletion in WP Event SOlution <= 4.1.19 versions.
🎖@cveNotify
Patchstack
undefined in undefined undefined undefined
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
🚨 CVE-2026-28174
Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions.
🎖@cveNotify
Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions.
🎖@cveNotify
Patchstack
Sensitive Data Exposure in WordPress WP Event SOlution Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.