CVE Notify
@cveNotify
19.5K subscribers
250K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
About
Blog
Apps
Platform
Join
CVE Notify
19.5K subscribers
CVE Notify
🚨 CVE-2026-42723
Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress CleanSkin Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42724
Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress CleanSkin Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-42777
Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Aalto Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-45440
Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress WP Ultimate CSV Importer Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-48193
Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Uminex Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-48194
Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress DukaMarket Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-57742
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group Kids Planet allows Reflected XSS.

This issue affects Kids Planet: from n/a through 2.2.14.2.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Kids Planet Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-62020
Unauthenticated Local File Inclusion in TouchUp < 1.4 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress TouchUp Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-62027
Unauthenticated Cross Site Scripting (XSS) in Team Section Block <= 2.0.4 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Team Section Block Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-62030
Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.

🎖@cveNotify
Patchstack
Server Side Request Forgery (SSRF) in WordPress StreamCast Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-62031
Unauthenticated SQL Injection in uListing <= 2.2.0 versions.

🎖@cveNotify
Patchstack
SQL Injection in WordPress uListing Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
8 views
CVE Notify
🚨 CVE-2026-62032
Unauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress DirectoryPress Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
8 views
CVE Notify
🚨 CVE-2026-62037
Unauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Document Embedder Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views
CVE Notify
🚨 CVE-2026-62043
Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension <= 5.0.7 versions.

🎖@cveNotify
Patchstack
Sensitive Data Exposure in WordPress Contact Form 7 – Dynamic Text Extension Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-62050
Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Splendour Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-62051
Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Stargaze Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-62052
Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Tipsy Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-62053
Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Wine House Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-62054
Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.

🎖@cveNotify
Patchstack
PHP Object Injection in WordPress Yacht Rental Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
5 views
CVE Notify
🚨 CVE-2026-62064
Unauthenticated Cross Site Scripting (XSS) in Ambed <= 1.0.0 versions.

🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Ambed Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
6 views
CVE Notify
🚨 CVE-2026-62065
Unauthenticated Local File Inclusion in Cardea <= 2.3 versions.

🎖@cveNotify
Patchstack
Local File Inclusion in WordPress Cardea Theme
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
7 views