CVE Notify
@cveNotify
19.7K subscribers
4 photos
285K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.7K subscribers
CVE Notify
🚨 CVE-2026-84756
Subscriber Privilege Escalation in WCFM Membership <= 2.11.11 versions.

🎖@cveNotify
Patchstack
Privilege Escalation in WordPress WCFM Membership Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-84757
Unauthenticated Settings Change in WP Compress <= 7.21.28 versions.

🎖@cveNotify
Patchstack
Settings Change in WordPress WP Compress Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-84758
Unauthenticated Broken Access Control in Business Directory <= 6.4.26 versions.

🎖@cveNotify
7 views
CVE Notify
🚨 CVE-2026-84761
Unauthenticated Server Side Request Forgery (SSRF) in LiteSpeed Cache <= 7.9 versions.

🎖@cveNotify
9 views
CVE Notify
🚨 CVE-2026-84762
Unauthenticated Bypass Vulnerability in WP EasyPay <= 4.5.3 versions.

🎖@cveNotify
Patchstack
Bypass Vulnerability in WordPress WP EasyPay Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-84763
Unauthenticated Cross Site Scripting (XSS) in RTMKit <= 2.1.5 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress RTMKit Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-84765
Unauthenticated Cross Site Scripting (XSS) in Breadcrumb NavXT <= 7.5.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Breadcrumb NavXT Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-84766
Unauthenticated Bypass Vulnerability in FluentBooking Pro <= 2.2.1 versions.

🎖@cveNotify
6 views
CVE Notify
🚨 CVE-2026-84767
Unauthenticated Bypass Vulnerability in BookIt <= 2.6.0.3 versions.

🎖@cveNotify
Patchstack
Bypass Vulnerability in WordPress BookIt Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-84768
Unauthenticated SQL Injection in VikAppointments Services Booking Calendar <= 1.2.20 versions.

🎖@cveNotify
6 views
CVE Notify
🚨 CVE-2026-84769
Unauthenticated Insecure Direct Object References (IDOR) in Business Directory <= 6.4.26 versions.

🎖@cveNotify
Patchstack
Insecure Direct Object References (IDOR) in WordPress Business Directory Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-84773
Unauthenticated Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.6 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress EWWW Image Optimizer Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-84774
Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.11 versions.

🎖@cveNotify
6 views
CVE Notify
🚨 CVE-2026-84776
Unauthenticated Denial of Service Attack in MalCare Security <= 6.69 versions.

🎖@cveNotify
Patchstack
Denial of Service Attack in WordPress MalCare Security Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-84777
Unauthenticated Broken Authentication in Really Simple SSL <= 9.8.0 versions.

🎖@cveNotify
Patchstack
Broken Authentication in WordPress Really Simple SSL Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-84778
Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration &amp; Cloning <= 6.65 versions.

🎖@cveNotify
Patchstack
Denial of Service Attack in WordPress Migrate Guru – Site Migration & Cloning Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-84779
Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt &amp; MCP for AI Agents <= 1.51.0 versions.

🎖@cveNotify
6 views
CVE Notify
🚨 CVE-2026-84812
Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.27 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress BP Better Messages Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-84814
Subscriber Privilege Escalation in Bricksforge <= 3.1.8.8 versions.

🎖@cveNotify
Patchstack
Privilege Escalation in WordPress Bricksforge Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
8 views
CVE Notify
🚨 CVE-2026-84834
Unauthenticated PHP Object Injection in JobSearch <= 3.2.0 versions.

🎖@cveNotify
8 views
CVE Notify
🚨 CVE-2026-84836
Subscriber Insecure Direct Object References (IDOR) in WC Ukraine Shipping <= 1.22.3 versions.

🎖@cveNotify
Patchstack
Insecure Direct Object References (IDOR) in WordPress WC Ukraine Shipping Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views