CVE Notify
@cveNotify
19.5K subscribers
254K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.5K subscribers
CVE Notify
🚨 CVE-2026-27350
Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery.

This issue affects Builderius: from 1.4 through 1.4-beta.

🎖@cveNotify
Patchstack
Server Side Request Forgery (SSRF) in WordPress Builderius Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
14 views
CVE Notify
🚨 CVE-2026-39799
Unauthenticated Cross Site Scripting (XSS) in WP File Download <= 6.3.6 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress WP File Download Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
14 views
CVE Notify
🚨 CVE-2026-39800
Unauthenticated Cross Site Scripting (XSS) in Additional Order Filters for WooCommerce <= 1.24 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Additional Order Filters for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-40800
Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-40803
Unauthenticated Cross Site Scripting (XSS) in Jotform &#8211; AI Chatbot <= 3.8.2 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Jotform – AI Chatbot Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-42419
Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup <= 1.4.0 versions.

🎖@cveNotify
Patchstack
Sensitive Data Exposure in WordPress Swish Migrate and Backup Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-42630
Unauthenticated Sensitive Data Exposure in Web Plura Backup &amp; Restore Manager <= 0.2.25 versions.

🎖@cveNotify
Patchstack
Sensitive Data Exposure in WordPress Web Plura Backup & Restore Manager Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-42631
Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Qode Music Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42632
Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Qode Real Estate Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42633
Subscriber SQL Injection in Events Manager <= 7.4.6 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Events Manager Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42693
Unauthenticated Cross Site Scripting (XSS) in Jannah <= 7.6.5 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Jannah Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-42697
Unauthenticated Cross Site Scripting (XSS) in Social Share Icons & Social Share Buttons <= 3.7.5 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Social Share Icons & Social Share Buttons Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
9 views
CVE Notify
🚨 CVE-2026-42699
Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress FV Player 8 Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
10 views
CVE Notify
🚨 CVE-2026-42702
Unauthenticated Cross Site Scripting (XSS) in Tutor LMS <= 4.1.0 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Tutor LMS Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
8 views
CVE Notify
🚨 CVE-2026-42709
Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42711
Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Slider by 10Web Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-42712
Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Qode Tours Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42715
Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Photo Gallery by 10Web Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42716
Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Payever - WooCommerce Gateway Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42717
Administrator SQL Injection in Leyka <= 3.32.3 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Leyka Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42718
Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Booster for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views