CVE Notify
@cveNotify
19.7K subscribers
4 photos
287K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.7K subscribers
CVE Notify
🚨 CVE-2026-32470
Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress FundEngine Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-32474
Contributor Arbitrary File Upload in Templatiq <= 0.2.5 versions.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Templatiq Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-32547
Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.22 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress BP Better Messages Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
12 views
CVE Notify
🚨 CVE-2026-66620
Editor PHP Object Injection in OptionTree <= 2.7.3 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress OptionTree Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-66622
Unauthenticated SQL Injection in Depicter Slider <= 4.8.0 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Depicter Slider Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views
CVE Notify
🚨 CVE-2026-66633
Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack < 6.2.12 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Fluent Forms Pro Add On Pack Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
4 views
CVE Notify
🚨 CVE-2026-66635
Unauthenticated Cross Site Request Forgery (CSRF) in Slider by 10Web <= 1.2.62 versions.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress Slider by 10Web Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-66638
Contributor Cross Site Scripting (XSS) in Frontend Admin by DynamiApps <= 3.29.10 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Frontend Admin by DynamiApps Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-66640
Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Login With Ajax Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-66644
Contributor Cross Site Scripting (XSS) in Typing Effect <= 1.3.7 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Typing Effect Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-66646
Contributor Cross Site Scripting (XSS) in WP Tab Widget <= 1.2.11 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress WP Tab Widget Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
3 views
CVE Notify
🚨 CVE-2026-66679
Unauthenticated Broken Access Control in Appointment Hour Booking <= 1.5.91 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Appointment Hour Booking Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-68567
Unauthenticated Cross Site Scripting (XSS) in Convert Pro <= 1.0.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Convert Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-73187
Unauthenticated SQL Injection in Sticky Chat Widget <= 1.4.2 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Sticky Chat Widget Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-73190
Unauthenticated Cross Site Scripting (XSS) in WPDM – Premium Packages <= 7.0.5 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress WPDM – Premium Packages Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
5 views
CVE Notify
🚨 CVE-2026-73341
Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress RegistrationMagic Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-73343
Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions.

🎖@cveNotify
8 views
CVE Notify
🚨 CVE-2026-73350
Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions.

🎖@cveNotify
Patchstack
Broken Authentication in WordPress SupportCandy Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
8 views
CVE Notify
🚨 CVE-2026-73352
Unauthenticated Broken Access Control in GiveWP <= 4.16.5.1 versions.

🎖@cveNotify
8 views
CVE Notify
🚨 CVE-2026-73360
Unauthenticated Cross Site Scripting (XSS) in Chaty Pro <= 3.5.8 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Chaty Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
7 views
CVE Notify
🚨 CVE-2026-73365
Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions.

🎖@cveNotify
Patchstack
undefined in undefined undefined undefined
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress, Drupal and Joomla security issues.
6 views