CVE Notify
@cveNotify
19.7K subscribers
4 photos
296K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.7K subscribers
CVE Notify
🚨 CVE-2026-28166
Unauthenticated Cross Site Scripting (XSS) in Tourmaster <= 5.4.9 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Tourmaster Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
8 views
CVE Notify
🚨 CVE-2026-28167
Unauthenticated Arbitrary File Download in Super Forms <= 6.3.315 versions.

🎖@cveNotify
Patchstack
Arbitrary File Download in WordPress Super Forms Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-28171
Unauthenticated Arbitrary File Deletion in WooCommerce File Approval <= 10.7 versions.

🎖@cveNotify
Patchstack
Arbitrary File Deletion in WordPress WooCommerce File Approval Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-28190
Subscriber Broken Access Control in ProLancer Element <= 1.4.8 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress ProLancer Element Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-32471
Subscriber SQL Injection in ProLancer Element <= 1.4.8 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress ProLancer Element Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-32476
Unauthenticated Cross Site Scripting (XSS) in Brave Conversion Engine (PRO) <= 0.8.6 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Brave Conversion Engine (PRO) Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
8 views
CVE Notify
🚨 CVE-2026-32477
Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons <= 2.2.0 versions.

🎖@cveNotify
Patchstack
Arbitrary File Deletion in WordPress ShopBuilder Pro – Elementor WooCommerce Builder Addons Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
8 views
CVE Notify
🚨 CVE-2026-32551
Unauthenticated SQL Injection in Woo Essential <= 4.3.0 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Woo Essential Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-32558
Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8.9.1 versions.

🎖@cveNotify
Patchstack
Privilege Escalation in WordPress Affiliate Pro - Affiliate Program for WooCommerce & WordPress Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
9 views
CVE Notify
🚨 CVE-2026-66584
Unauthenticated Cross Site Scripting (XSS) in 12 Step Meeting List <= 3.19.16 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress 12 Step Meeting List Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
8 views
CVE Notify
🚨 CVE-2026-66585
Unauthenticated Sensitive Data Exposure in WP Cafe Pro < 3.0.15 versions.

🎖@cveNotify
Patchstack
Sensitive Data Exposure in WordPress WP Cafe Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
8 views
CVE Notify
🚨 CVE-2026-66587
Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress WP Cafe Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-66610
Unauthenticated Cross Site Scripting (XSS) in Urna <= 2.6.2 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Urna Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-66648
Unauthenticated Privilege Escalation in Jawn <= 1.4.2 versions.

🎖@cveNotify
Patchstack
Privilege Escalation in WordPress Jawn Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-66650
Unauthenticated PHP Object Injection in FreightCo <= 1.1.15 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress FreightCo Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
8 views
CVE Notify
🚨 CVE-2026-66670
Unauthenticated Local File Inclusion in Måne <= 1.7 versions.

🎖@cveNotify
9 views
CVE Notify
🚨 CVE-2026-66671
Unauthenticated Local File Inclusion in Verdure Core <= 1.2 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Verdure Core Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
11 views
CVE Notify
🚨 CVE-2026-78270
Author SQL Injection in FluentCRM Pro <= 3.1.12 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress FluentCRM Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
10 views
CVE Notify
🚨 CVE-2026-78272
Subscriber Broken Access Control in Fluent Support Pro <= 2.3.1 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Fluent Support Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
9 views
CVE Notify
🚨 CVE-2026-78277
Subscriber Server Side Request Forgery (SSRF) in FluentCRM Pro <= 3.1.12 versions.

🎖@cveNotify
Patchstack
Server Side Request Forgery (SSRF) in WordPress FluentCRM Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
13 views
CVE Notify
🚨 CVE-2026-78278
Subscriber Insecure Direct Object References (IDOR) in Fluent Boards Pro <= 2.0.11 versions.

🎖@cveNotify
Patchstack
Insecure Direct Object References (IDOR) in WordPress Fluent Boards Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
19 views