CVE Notify
@cveNotify
19.5K subscribers
250K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.5K subscribers
CVE Notify
🚨 CVE-2026-42631
Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Qode Music Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42632
Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Qode Real Estate Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42633
Subscriber SQL Injection in Events Manager <= 7.4.6 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Events Manager Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42693
Unauthenticated Cross Site Scripting (XSS) in Jannah <= 7.6.5 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Jannah Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-42697
Unauthenticated Cross Site Scripting (XSS) in Social Share Icons & Social Share Buttons <= 3.7.5 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Social Share Icons & Social Share Buttons Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
9 views
CVE Notify
🚨 CVE-2026-42699
Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress FV Player 8 Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
10 views
CVE Notify
🚨 CVE-2026-42702
Unauthenticated Cross Site Scripting (XSS) in Tutor LMS <= 4.1.0 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Tutor LMS Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
8 views
CVE Notify
🚨 CVE-2026-42709
Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42711
Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Slider by 10Web Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-42712
Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Qode Tours Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42715
Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Photo Gallery by 10Web Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42716
Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Payever - WooCommerce Gateway Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42717
Administrator SQL Injection in Leyka <= 3.32.3 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Leyka Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42718
Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Booster for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42722
Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Frontend Admin by DynamiApps Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42723
Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress CleanSkin Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42724
Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress CleanSkin Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42777
Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Aalto Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-45440
Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress WP Ultimate CSV Importer Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-48193
Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Uminex Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-48194
Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress DukaMarket Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views