CVE Notify
@cveNotify
19.5K subscribers
250K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.5K subscribers
CVE Notify
🚨 CVE-2026-42709
Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42711
Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Slider by 10Web Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-42712
Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Qode Tours Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42715
Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Photo Gallery by 10Web Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42716
Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Payever - WooCommerce Gateway Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42717
Administrator SQL Injection in Leyka <= 3.32.3 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Leyka Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42718
Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Booster for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42722
Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress Frontend Admin by DynamiApps Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42723
Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress CleanSkin Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42724
Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress CleanSkin Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42777
Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Aalto Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-45440
Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress WP Ultimate CSV Importer Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-48193
Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Uminex Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-48194
Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress DukaMarket Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-57742
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group Kids Planet allows Reflected XSS.

This issue affects Kids Planet: from n/a through 2.2.14.2.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Kids Planet Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-62020
Unauthenticated Local File Inclusion in TouchUp < 1.4 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress TouchUp Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-62027
Unauthenticated Cross Site Scripting (XSS) in Team Section Block <= 2.0.4 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Team Section Block Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-62030
Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.

🎖@cveNotify
Patchstack
Server Side Request Forgery (SSRF) in WordPress StreamCast Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-62031
Unauthenticated SQL Injection in uListing <= 2.2.0 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress uListing Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
8 views
CVE Notify
🚨 CVE-2026-62032
Unauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress DirectoryPress Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
8 views
CVE Notify
🚨 CVE-2026-62037
Unauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Document Embedder Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views