CVE Notify
@cveNotify
19.7K subscribers
4 photos
286K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.7K subscribers
CVE Notify
🚨 CVE-2026-85138
A vulnerability was detected in SeaCMS up to 13.6. Affected is the function addslashes of the file weixin/index.php of the component WeChat Module. The manipulation of the argument Content results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.

🎖@cveNotify
GitHub
seacms-13.6-security-advisories/d-003-weixin-xml-entity-sqli.md at a084a3e573240d54860153321df271280daec262 · T-Chachamaru/seacms…
Contribute to T-Chachamaru/seacms-13.6-security-advisories development by creating an account on GitHub.
5 views
CVE Notify
🚨 CVE-2026-81281
Subscriber Cross Site Scripting (XSS) in Graphene <= 2.9.4 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Graphene Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-81282
Subscriber Cross Site Scripting (XSS) in Product Variations Swatches for WooCommerce <= 1.1.18 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Product Variations Swatches for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-81292
Unauthenticated Cross Site Scripting (XSS) in Simple Payment <= 2.5.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Simple Payment Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-81295
Unauthenticated Cross Site Scripting (XSS) in Under Construction <= 5.82 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Under Construction Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-81300
Unauthenticated Cross Site Scripting (XSS) in Calculation For Contact Form 7 <= 1.0 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Calculation For Contact Form 7 Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-81776
Unauthenticated Cross Site Scripting (XSS) in WP QuickLaTeX <= 3.8.8 versions.

🎖@cveNotify
7 views
CVE Notify
🚨 CVE-2026-84215
Unauthenticated Broken Access Control in Timetics <= 1.0.61 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Timetics Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-84238
Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium < 4.46.0 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress YITH Request a Quote for WooCommerce Premium Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-84752
Contributor PHP Object Injection in RTMKit <= 2.1.5 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress RTMKit Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-84753
Unauthenticated PHP Object Injection in Mail Mint <= 1.31.0 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Mail Mint Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
8 views
CVE Notify
🚨 CVE-2026-84754
Unauthenticated Broken Access Control in WPFunnels <= 3.12.13 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress WPFunnels Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-84755
Unauthenticated Broken Access Control in Mail Mint <= 1.31.0 versions.

🎖@cveNotify
Patchstack
Broken Access Control in WordPress Mail Mint Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-84756
Subscriber Privilege Escalation in WCFM Membership <= 2.11.11 versions.

🎖@cveNotify
Patchstack
Privilege Escalation in WordPress WCFM Membership Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-84757
Unauthenticated Settings Change in WP Compress <= 7.21.28 versions.

🎖@cveNotify
Patchstack
Settings Change in WordPress WP Compress Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
10 views
CVE Notify
🚨 CVE-2026-84758
Unauthenticated Broken Access Control in Business Directory <= 6.4.26 versions.

🎖@cveNotify
9 views
CVE Notify
🚨 CVE-2026-84761
Unauthenticated Server Side Request Forgery (SSRF) in LiteSpeed Cache <= 7.9 versions.

🎖@cveNotify
7 views
CVE Notify
🚨 CVE-2026-84762
Unauthenticated Bypass Vulnerability in WP EasyPay <= 4.5.3 versions.

🎖@cveNotify
Patchstack
Bypass Vulnerability in WordPress WP EasyPay Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-84763
Unauthenticated Cross Site Scripting (XSS) in RTMKit <= 2.1.5 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress RTMKit Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-84765
Unauthenticated Cross Site Scripting (XSS) in Breadcrumb NavXT <= 7.5.1 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Breadcrumb NavXT Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-84766
Unauthenticated Bypass Vulnerability in FluentBooking Pro <= 2.2.1 versions.

🎖@cveNotify
7 views