Skip to content
Noroxi

Gab

Patchstack Bug Bounty Program

90 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers
  • CVE-2025-26951
    26Monitor

    WordPress C9 Blocks plugin <= 1.7.7 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    covertnine · c9 blocksApr 15, 2025

  • CVE-2025-26745
    26Monitor

    WordPress RS Elements Elementor Addon plugin <= 1.1.5 - Stored Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    rstheme · rs elements elementor addonApr 15, 2025

  • CVE-2025-32191
    26Monitor

    WordPress News Element Elementor Blog Magazine plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    webangon · news element elementor blog magazineApr 4, 2025

  • CVE-2025-32190
    26Monitor

    WordPress Musician's Pack For Elementor plugin <= 1.8.7 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    smartwpress · musician's pack for elementorApr 4, 2025

  • CVE-2025-32189
    26Monitor

    WordPress BWD Elementor Addons plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    best wp developer · bwd elementor addonsApr 4, 2025

  • CVE-2025-32187
    26Monitor

    WordPress Administrator Z plugin <= 2026.03.02 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    quý lê 91 · administrator zApr 4, 2025

  • CVE-2025-32186
    26Monitor

    WordPress Turbo Addons for Elementor plugin <= 1.7.7 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    turbo addons · turbo addons elementorApr 4, 2025

  • CVE-2025-31875
    26Monitor

    WordPress FancyPost plugin <= 6.0.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    pluginic · fancypostApr 1, 2025

  • CVE-2025-31849
    26Monitor

    WordPress Nemesis All-in-One plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    fbtemplates · nemesis all-in-oneApr 1, 2025

  • CVE-2025-31847
    26Monitor

    WordPress mFolio Lite plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    themelooks · mfolio liteApr 1, 2025

  • CVE-2025-31844
    26Monitor

    WordPress Magical Blocks plugin <= 1.0.12 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    noor alam · magical blocksApr 1, 2025

  • CVE-2025-31829
    26Monitor

    WordPress ShopCred plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    devscred · shopcredApr 1, 2025

  • CVE-2025-31817
    26Monitor

    WordPress BlockWheels plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    wpwheels · blockwheelsApr 1, 2025

  • CVE-2025-31815
    26Monitor

    WordPress Design Blocks plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    devscred · design blocksApr 1, 2025

  • CVE-2025-31813
    26Monitor

    WordPress WPSHARE247 Elementor Addons plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    website366.com · wpshare247 elementor addonsApr 1, 2025

  • CVE-2025-31790
    26Monitor

    WordPress Posten plugin <= 0.0.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    binsaifullah · postenApr 1, 2025

  • CVE-2025-31749
    26Monitor

    WordPress HMH Footer Builder For Elementor plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    wpelite · hmh footer builder for elementorApr 1, 2025

  • CVE-2025-31092
    26Monitor

    WordPress Click to Chat – WP Support All-in-One Floating Widget plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    ninja team · click to chat – wp support all-in-one floating widgetMar 27, 2025

  • CVE-2025-22644
    26Monitor

    WordPress Vayu Blocks – Gutenberg Blocks plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    themehunk · vayu blocksMar 27, 2025

  • CVE-2025-26771
    21Monitor

    WordPress SKT Blocks plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    sktthemes · skt blocksFeb 17, 2025

  • CVE-2025-26761
    26Monitor

    WordPress Easy Elementor Addons plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    hashthemes · easy elementor addonsFeb 16, 2025

  • CVE-2025-22498
    28Monitor

    WordPress LucidLMS plugin <= 1.0.5 - Reflected Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    n3wnormal · lucidlmsJan 13, 2025

  • CVE-2025-22500
    26Monitor

    WordPress Alpha Price Table For Elementor plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    ali ali · alpha price table for elementorJan 7, 2025

  • CVE-2025-22323
    26Monitor

    WordPress Image Hover Effects for Elementor plugin <= 1.0.2.4 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    liton arefin · image hover effects for elementorJan 7, 2025

  • CVE-2024-56260
    26Monitor

    WordPress ShopElement plugin <= 2.0.0 - Stored Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    storeplugin · shopelementJan 2, 2025