CVE Notify
@cveNotify
19.7K subscribers
4 photos
301K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.7K subscribers
CVE Notify
🚨 CVE-2026-66583
Unauthenticated PHP Object Injection in Forminator <= 1.57.0 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Forminator Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
20 views
CVE Notify
🚨 CVE-2026-66586
Author Local File Inclusion in WP Cafe Pro < 3.0.15 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress WP Cafe Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
18 views
CVE Notify
🚨 CVE-2026-66590
Unauthenticated Cross Site Scripting (XSS) in Tagembed <= 7.4 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Tagembed Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
17 views
CVE Notify
🚨 CVE-2026-66592
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress rtMedia for WordPress, BuddyPress and bbPress Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
15 views
CVE Notify
🚨 CVE-2026-66593
Unauthenticated SQL Injection in Security & Malware scan by CleanTalk <= 2.184 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Security & Malware scan by CleanTalk Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
16 views
CVE Notify
🚨 CVE-2026-66594
Subscriber SQL Injection in WordPress Persistent Login <= 3.1.0 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress WordPress Persistent Login Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
17 views
CVE Notify
🚨 CVE-2026-66595
Unauthenticated Broken Access Control in WP Data Access <= 5.5.80 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress WP Data Access Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
18 views
CVE Notify
🚨 CVE-2026-66597
Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 6.5.1.4 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress wpDataTables Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
16 views
CVE Notify
🚨 CVE-2026-66598
Unauthenticated Cross Site Scripting (XSS) in B2BKing Premium <= 5.6.07 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress B2BKing Premium Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
19 views
CVE Notify
🚨 CVE-2026-66600
Author Arbitrary File Upload in Media LIbrary Assistant <= 3.39 versions.

🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Media LIbrary Assistant Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
16 views
CVE Notify
🚨 CVE-2026-66601
Subscriber Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.39 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Media LIbrary Assistant Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
14 views
CVE Notify
🚨 CVE-2026-66604
Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress GeoDirectory Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
15 views
CVE Notify
🚨 CVE-2026-66606
Unauthenticated Cross Site Scripting (XSS) in SmartSMTP <= 1.2.0 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress SmartSMTP Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
12 views
CVE Notify
🚨 CVE-2026-66607
Unauthenticated Cross Site Scripting (XSS) in Advance Product Search <= 1.4.8 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Advance Product Search Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
12 views
CVE Notify
🚨 CVE-2026-66609
Unauthenticated SQL Injection in TheGem (Elementor) <= 5.12.3 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress TheGem (Elementor) Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
11 views
CVE Notify
🚨 CVE-2026-66611
Unauthenticated Cross Site Scripting (XSS) in Paymob for WooCommerce <= 4.1.10 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Paymob for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
11 views
CVE Notify
🚨 CVE-2026-66612
Unauthenticated Cross Site Scripting (XSS) in Aora <= 1.3.19 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Aora Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
11 views
CVE Notify
🚨 CVE-2026-66614
Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.2 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress SEO Plugin by Squirrly SEO Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
11 views
CVE Notify
🚨 CVE-2026-66615
Unauthenticated Cross Site Scripting (XSS) in Podlove Podcast Publisher <= 4.5.4 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Podlove Podcast Publisher Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
17 views
CVE Notify
🚨 CVE-2026-66616
Unauthenticated Cross Site Scripting (XSS) in Form Maker by 10Web <= 1.15.46 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Form Maker by 10Web Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
18 views
CVE Notify
🚨 CVE-2026-66647
Subscriber Broken Access Control in Homlisti <= 3.1.2 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Homlisti Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
12 views