CVE Notify
@cveNotify
19.7K subscribers
4 photos
301K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.7K subscribers
CVE Notify
🚨 CVE-2025-63080
Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g. system file read or command execution.   
This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B.

🎖@cveNotify
cert.pl
Vulnerabilities in KAON PG5298A/PG5298B routers
CERT Polska has received a report about 2 vulnerabilities (CVE-2025-63080 and CVE-2026-6017) found in KAON PG5298A/PG5298B routers.
15 views
CVE Notify
🚨 CVE-2026-28151
Unauthenticated Local File Inclusion in Tonda < 2.6 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Tonda Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
14 views
CVE Notify
🚨 CVE-2026-28153
Unauthenticated Broken Access Control in Notification Master &#8211; Real-Time WordPress Notifications With Email, SMS, Webhooks &amp; More <= 1.7.1 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
12 views
CVE Notify
🚨 CVE-2026-28162
Unauthenticated Cross Site Scripting (XSS) in Events Made Easy <= 3.2.5 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Events Made Easy Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
12 views
CVE Notify
🚨 CVE-2026-28165
Unauthenticated Privilege Escalation in Digits <= 9.2 versions.

🎖@cveNotify
Patchstack
Privilege Escalation in WordPress Digits Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
11 views
CVE Notify
🚨 CVE-2026-28166
Unauthenticated Cross Site Scripting (XSS) in Tourmaster <= 5.4.9 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Tourmaster Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
19 views
CVE Notify
🚨 CVE-2026-28167
Unauthenticated Arbitrary File Download in Super Forms <= 6.3.315 versions.

🎖@cveNotify
Patchstack
Arbitrary File Download in WordPress Super Forms Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
19 views
CVE Notify
🚨 CVE-2026-28171
Unauthenticated Arbitrary File Deletion in WooCommerce File Approval <= 10.7 versions.

🎖@cveNotify
Patchstack
Arbitrary File Deletion in WordPress WooCommerce File Approval Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
11 views
CVE Notify
🚨 CVE-2026-28190
Subscriber Broken Access Control in ProLancer Element <= 1.4.8 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress ProLancer Element Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
19 views
CVE Notify
🚨 CVE-2026-32471
Subscriber SQL Injection in ProLancer Element <= 1.4.8 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress ProLancer Element Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
20 views
CVE Notify
🚨 CVE-2026-32476
Unauthenticated Cross Site Scripting (XSS) in Brave Conversion Engine (PRO) <= 0.8.6 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Brave Conversion Engine (PRO) Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
12 views
CVE Notify
🚨 CVE-2026-32477
Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons <= 2.2.0 versions.

🎖@cveNotify
Patchstack
Arbitrary File Deletion in WordPress ShopBuilder Pro – Elementor WooCommerce Builder Addons Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
11 views
CVE Notify
🚨 CVE-2026-32478
Subscriber SQL Injection in WP Project Manager Pro <= 4.0.1 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress WP Project Manager Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
11 views
CVE Notify
🚨 CVE-2026-32551
Unauthenticated SQL Injection in Woo Essential <= 4.3.0 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Woo Essential Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
8 views
CVE Notify
🚨 CVE-2026-32558
Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8.9.1 versions.

🎖@cveNotify
Patchstack
Privilege Escalation in WordPress Affiliate Pro - Affiliate Program for WooCommerce & WordPress Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
9 views
CVE Notify
🚨 CVE-2026-66584
Unauthenticated Cross Site Scripting (XSS) in 12 Step Meeting List <= 3.19.16 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress 12 Step Meeting List Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-66585
Unauthenticated Sensitive Data Exposure in WP Cafe Pro < 3.0.15 versions.

🎖@cveNotify
Patchstack
Sensitive Data Exposure in WordPress WP Cafe Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-66587
Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress WP Cafe Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-66599
Unauthenticated Cross Site Scripting (XSS) in WPComplete <= 2.9.5.6 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress WPComplete Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
9 views
CVE Notify
🚨 CVE-2026-66610
Unauthenticated Cross Site Scripting (XSS) in Urna <= 2.6.2 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Urna Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
15 views
CVE Notify
🚨 CVE-2026-66623
Unauthenticated Cross Site Scripting (XSS) in Social Media & Share Icons <= 2.9.9 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Social Media & Share Icons Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
15 views