CVE Notify
@cveNotify
19.7K subscribers
4 photos
296K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.7K subscribers
CVE Notify
🚨 CVE-2026-32476
Unauthenticated Cross Site Scripting (XSS) in Brave Conversion Engine (PRO) <= 0.8.6 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Brave Conversion Engine (PRO) Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
8 views
CVE Notify
🚨 CVE-2026-32477
Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons <= 2.2.0 versions.

🎖@cveNotify
Patchstack
Arbitrary File Deletion in WordPress ShopBuilder Pro – Elementor WooCommerce Builder Addons Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
8 views
CVE Notify
🚨 CVE-2026-32551
Unauthenticated SQL Injection in Woo Essential <= 4.3.0 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Woo Essential Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-32558
Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8.9.1 versions.

🎖@cveNotify
Patchstack
Privilege Escalation in WordPress Affiliate Pro - Affiliate Program for WooCommerce & WordPress Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
9 views
CVE Notify
🚨 CVE-2026-66584
Unauthenticated Cross Site Scripting (XSS) in 12 Step Meeting List <= 3.19.16 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress 12 Step Meeting List Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
8 views
CVE Notify
🚨 CVE-2026-66585
Unauthenticated Sensitive Data Exposure in WP Cafe Pro < 3.0.15 versions.

🎖@cveNotify
Patchstack
Sensitive Data Exposure in WordPress WP Cafe Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
8 views
CVE Notify
🚨 CVE-2026-66587
Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress WP Cafe Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-66610
Unauthenticated Cross Site Scripting (XSS) in Urna <= 2.6.2 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Urna Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-66648
Unauthenticated Privilege Escalation in Jawn <= 1.4.2 versions.

🎖@cveNotify
Patchstack
Privilege Escalation in WordPress Jawn Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-66650
Unauthenticated PHP Object Injection in FreightCo <= 1.1.15 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress FreightCo Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
8 views
CVE Notify
🚨 CVE-2026-66670
Unauthenticated Local File Inclusion in Måne <= 1.7 versions.

🎖@cveNotify
9 views
CVE Notify
🚨 CVE-2026-66671
Unauthenticated Local File Inclusion in Verdure Core <= 1.2 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Verdure Core Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
11 views
CVE Notify
🚨 CVE-2026-78270
Author SQL Injection in FluentCRM Pro <= 3.1.12 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress FluentCRM Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
10 views
CVE Notify
🚨 CVE-2026-78272
Subscriber Broken Access Control in Fluent Support Pro <= 2.3.1 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Fluent Support Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
9 views
CVE Notify
🚨 CVE-2026-78277
Subscriber Server Side Request Forgery (SSRF) in FluentCRM Pro <= 3.1.12 versions.

🎖@cveNotify
Patchstack
Server Side Request Forgery (SSRF) in WordPress FluentCRM Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
13 views
CVE Notify
🚨 CVE-2026-78278
Subscriber Insecure Direct Object References (IDOR) in Fluent Boards Pro <= 2.0.11 versions.

🎖@cveNotify
Patchstack
Insecure Direct Object References (IDOR) in WordPress Fluent Boards Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
19 views
CVE Notify
🚨 CVE-2026-78279
Unauthenticated Cross Site Request Forgery (CSRF) in Fluent Support Pro <= 2.3.1 versions.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress Fluent Support Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
30 views
CVE Notify
🚨 CVE-2026-78280
Unauthenticated Cross Site Request Forgery (CSRF) in Hash Form <= 1.4.0 versions.

🎖@cveNotify
Patchstack
Cross Site Request Forgery (CSRF) in WordPress Hash Form Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
38 views
CVE Notify
🚨 CVE-2026-78290
Contributor Cross Site Scripting (XSS) in Magazine Blocks <= 1.8.6 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Magazine Blocks Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
45 views
CVE Notify
🚨 CVE-2026-78291
Unauthenticated Broken Access Control in RepairBuddy <= 4.1223 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress RepairBuddy Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
51 views
CVE Notify
🚨 CVE-2026-21756
HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments.

🎖@cveNotify
61 views