CVE Notify
@cveNotify
19.7K subscribers
4 photos
300K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.7K subscribers
CVE Notify
🚨 CVE-2025-53999
Unauthenticated Broken Access Control in Altair <= 5.2.2 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Altair Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
32 views
CVE Notify
🚨 CVE-2025-62307
HCL IntelliOps Event Management (IEM) is affected by insufficient logging. Insufficient logging weakens accountability, obscures attack detection, and enables privilege probing.

🎖@cveNotify
Hcl-Software
Security Bulletin: Multiple security vulnerabilities affect HCL IntelliOps Event Management (IEM) - Customer Support
HCL IntelliOps Event Management is affected by multiple security vulnerabilities.
33 views
CVE Notify
🚨 CVE-2026-28150
Unauthenticated Local File Inclusion in Golo Framework < 1.7.5 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Golo Framework Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
31 views
CVE Notify
🚨 CVE-2026-66581
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress JetEngine Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
24 views
CVE Notify
🚨 CVE-2026-66582
Unauthenticated Cross Site Scripting (XSS) in TranslatePress <= 3.3.2 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress TranslatePress Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
20 views
CVE Notify
🚨 CVE-2026-66583
Unauthenticated PHP Object Injection in Forminator <= 1.57.0 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Forminator Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
20 views
CVE Notify
🚨 CVE-2026-66586
Author Local File Inclusion in WP Cafe Pro < 3.0.15 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress WP Cafe Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
18 views
CVE Notify
🚨 CVE-2026-66590
Unauthenticated Cross Site Scripting (XSS) in Tagembed <= 7.4 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Tagembed Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
17 views
CVE Notify
🚨 CVE-2026-66592
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress rtMedia for WordPress, BuddyPress and bbPress Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
15 views
CVE Notify
🚨 CVE-2026-66593
Unauthenticated SQL Injection in Security & Malware scan by CleanTalk <= 2.184 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Security & Malware scan by CleanTalk Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
16 views
CVE Notify
🚨 CVE-2026-66594
Subscriber SQL Injection in WordPress Persistent Login <= 3.1.0 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress WordPress Persistent Login Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
17 views
CVE Notify
🚨 CVE-2026-66595
Unauthenticated Broken Access Control in WP Data Access <= 5.5.80 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress WP Data Access Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
18 views
CVE Notify
🚨 CVE-2026-66597
Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 6.5.1.4 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress wpDataTables Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
16 views
CVE Notify
🚨 CVE-2026-66598
Unauthenticated Cross Site Scripting (XSS) in B2BKing Premium <= 5.6.07 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress B2BKing Premium Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
19 views
CVE Notify
🚨 CVE-2026-66600
Author Arbitrary File Upload in Media LIbrary Assistant <= 3.39 versions.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Media LIbrary Assistant Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
16 views
CVE Notify
🚨 CVE-2026-66601
Subscriber Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.39 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Media LIbrary Assistant Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
14 views
CVE Notify
🚨 CVE-2026-66604
Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress GeoDirectory Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
15 views
CVE Notify
🚨 CVE-2026-66606
Unauthenticated Cross Site Scripting (XSS) in SmartSMTP <= 1.2.0 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress SmartSMTP Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
12 views
CVE Notify
🚨 CVE-2026-66607
Unauthenticated Cross Site Scripting (XSS) in Advance Product Search <= 1.4.8 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Advance Product Search Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
12 views
CVE Notify
🚨 CVE-2026-66609
Unauthenticated SQL Injection in TheGem (Elementor) <= 5.12.3 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress TheGem (Elementor) Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
11 views
CVE Notify
🚨 CVE-2026-66611
Unauthenticated Cross Site Scripting (XSS) in Paymob for WooCommerce <= 4.1.10 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Paymob for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
11 views