Skip to content
Noroxi

Ex.Mi (Patchstack)

29 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers
  • CVE-2022-29434
    21Monitor

    WordPress Spiffy Calendar plugin <= 4.9.0 - Edit/Delete event via IDOR vulnerability

    MediumCVSS 5.4No exploitEPSS 1%

    spiffyplugins · spiffy calendarMay 20, 2022

  • CVE-2022-29432
    19Monitor

    WordPress wpDataTables plugin <= 2.1.27 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

    MediumCVSS 4.8No exploitEPSS 1%

    tms-outsource · wpdatatablesMay 20, 2022

  • CVE-2022-29423
    39Monitor

    WordPress Countdown & Clock plugin <= 2.3.2 - Pro Features Lock Bypass vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    edmonsoft · countdown builderMay 6, 2022

  • CVE-2022-29422
    19Monitor

    WordPress Countdown & Clock plugin <= 2.3.2 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

    MediumCVSS 4.8No exploitEPSS 1%

    edmonsoft · countdown builderMay 6, 2022

  • CVE-2022-29421
    24Monitor

    WordPress Countdown & Clock plugin <= 2.3.2 - Reflected Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 1%

    edmonsoft · countdown builderMay 6, 2022

  • CVE-2022-29414
    21Monitor

    WordPress Subscribe To Comments Reloaded plugin <= 211130 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

    MediumCVSS 5.4No exploitEPSS 0%

    wpkube · subscribe to comments reloadedApr 29, 2022

  • CVE-2022-29413
    24Monitor

    WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    hermit project · hermitApr 28, 2022

  • CVE-2022-29412
    21Monitor

    WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

    MediumCVSS 5.4No exploitEPSS 0%

    hermit project · hermitApr 28, 2022

  • CVE-2022-27854
    21Monitor

    WordPress Psychological tests & quizzes plugin <= 0.21.19 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 1%

    psychological tests \& quizzes project · psychological tests \& quizzesApr 26, 2022

  • CVE-2022-29418
    19Monitor

    WordPress Night Mode plugin <= 1.0.0 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 1%

    night mode project · night modeApr 25, 2022

  • CVE-2022-23976
    32Monitor

    WordPress Access Demo Importer plugin <= 1.0.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Data Reset (Posts / Pages / Media)

    HighCVSS 8.1No exploitEPSS 0%

    accesspressthemes · access demo importerApr 18, 2022

  • CVE-2022-23975
    26Monitor

    WordPress Access Demo Importer plugin <= 1.0.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Arbitrary Plugin Activation

    MediumCVSS 6.5No exploitEPSS 0%

    accesspressthemes · access demo importerApr 18, 2022

  • CVE-2022-27850
    17Monitor

    WordPress Simple Ajax Chat plugin <= 20220115 - Multiple Cross-Site Request Forgery (CSRF) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    plugin-planet · simple ajax chatApr 15, 2022

  • CVE-2022-27849
    31Monitor

    WordPress Simple Ajax Chat plugin <= 20220115 - Sensitive Information Disclosure vulnerability

    HighCVSS 7.5Proof of conceptEPSS 5%

    plugin-planet · simple ajax chatApr 15, 2022

  • CVE-2022-27847
    17Monitor

    WordPress Yoo Slider plugin <= 2.0.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Template Import

    MediumCVSS 4.3No exploitEPSS 0%

    yooslider · yoo sliderApr 13, 2022

  • CVE-2022-27846
    17Monitor

    WordPress Yoo Slider plugin <= 2.0.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Slider Creation / Modification

    MediumCVSS 4.3No exploitEPSS 0%

    yooslider · yoo sliderApr 13, 2022

  • CVE-2022-25615
    17Monitor

    WordPress eRoom plugin <= 1.3.8 - Cross-Site Request Forgery (CSRF) vulnerability leading to Cache Deletion

    MediumCVSS 4.3No exploitEPSS 0%

    stylemixthemes · eroom - zoom meetings \& webinarApr 11, 2022

  • CVE-2022-25614
    17Monitor

    WordPress eRoom plugin <= 1.3.7 - Cross-Site Request Forgery (CSRF) leading to Sync with Zoom Meetings vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    stylemixthemes · eroom - zoom meetings \& webinarApr 11, 2022

  • CVE-2022-25613
    21Monitor

    WordPress FV Flowplayer Video Player plugin <= 7.5.18.727 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 1%

    foliovision · fv flowplayer video playerApr 4, 2022

  • CVE-2022-25612
    21Monitor

    WordPress Simple Event Planner plugin <= 1.5.4 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

    MediumCVSS 5.4No exploitEPSS 1%

    presstigers · simple event plannerMar 25, 2022

  • CVE-2022-25606
    21Monitor

    WordPress WP-DownloadManager plugin <= 1.68.5 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

    MediumCVSS 5.4No exploitEPSS 1%

    wp-downloadmanager project · wp-downloadmanagerMar 25, 2022

  • CVE-2022-25605
    21Monitor

    WordPress WP-DownloadManager plugin <= 1.68.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

    MediumCVSS 5.4No exploitEPSS 1%

    wp-downloadmanager project · wp-downloadmanagerMar 18, 2022

  • CVE-2022-25601
    24Monitor

    WordPress Contact Form X plugin <= 2.4 - Reflected Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 1%

    plugin-planet · contact form xMar 11, 2022

  • CVE-2022-25600
    35Monitor

    WordPress WP Google Map plugin <= 4.2.3 - Cross-Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    weplugins · wp mapsMar 11, 2022

  • CVE-2021-31567
    27Monitor

    WordPress Download Monitor plugin <= 4.4.6 - Authenticated Arbitrary File Download vulnerability

    MediumCVSS 6.8No exploitEPSS 1%

    wpchill · download monitorJan 28, 2022