CVE Notify
@cveNotify
19.7K subscribers
4 photos
302K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.7K subscribers
CVE Notify
🚨 CVE-2026-27999
Subscriber Broken Access Control in Tourfic <= 2.23.1 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Tourfic Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-28001
Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress WP Directory Kit Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-28002
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics allows Blind SQL Injection.

This issue affects Booktics: from n/a through 1.0.22.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Booktics Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-28003
Unauthenticated Cross Site Scripting (XSS) in Maspik – Spam blacklist <= 2.9.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Maspik – Spam blacklist Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-28004
Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Business Directory Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-28008
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 versions.

🎖@cveNotify
Patchstack
Broken Authentication in WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-28142
Unauthenticated SQL Injection in Web Directory Free <= 1.7.13 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Web Directory Free Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-28148
Unauthenticated Bypass Vulnerability in Headless Single Sign On <= 1.6 versions.

🎖@cveNotify
Patchstack
Bypass Vulnerability in WordPress Headless Single Sign On Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-28149
Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Headless Single Sign On Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-28155
Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions.

🎖@cveNotify
Patchstack
Insecure Direct Object References (IDOR) in WordPress Do Lasso Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
9 views
CVE Notify
🚨 CVE-2026-28156
Subscriber SQL Injection in Do Lasso <= 358 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Do Lasso Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-28157
Subscriber Path Traversal in Do Lasso <= 358 versions.

🎖@cveNotify
Patchstack
Path Traversal in WordPress Do Lasso Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-28158
Unauthenticated Cross Site Scripting (XSS) in Do Lasso <= 358 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Do Lasso Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-28161
Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions.

🎖@cveNotify
Patchstack
Privilege Escalation in WordPress Service Finder Booking Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-28168
Subscriber SQL Injection in CubeWP <= 1.1.30 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress CubeWP Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-28170
Unauthenticated Cross Site Scripting (XSS) in Blog Floating Button <= 1.4.20 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Blog Floating Button Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-28173
Customer Arbitrary Content Deletion in WP Event SOlution <= 4.1.19 versions.

🎖@cveNotify
Patchstack
undefined in undefined undefined undefined
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-28174
Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions.

🎖@cveNotify
Patchstack
Sensitive Data Exposure in WordPress WP Event SOlution Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-28175
Unauthenticated Cross Site Scripting (XSS) in Visitors Traffic Real Time Statistics <= 8.11 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Visitors Traffic Real Time Statistics Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-28176
Unauthenticated PHP Object Injection in Booking Activities <= 1.18.4 versions.

🎖@cveNotify
Patchstack
undefined in undefined undefined undefined
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-28181
Subscriber Broken Access Control in AcyMailing SMTP Newsletter <= 10.11.1 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress AcyMailing SMTP Newsletter Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views