Skip to content
Noroxi

Kuba

19 credited records · 19 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Kuba

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Port scanning: 5 full scans a day (members only)
  • Uptime monitoring: 1 site, instant email when it goes down
  • Verify your domain: subdomains and takeover risk scanned every week
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-96558
    28Monitor

    Quiz and Survey Master (QSM) <= 11.2.6 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'qsm_hidden_questions' Parameter

    HighCVSS 7.2No exploitEPSS 0%

    expresstech · quiz and survey master (qsm) – quiz maker & survey maker3 days ago

  • CVE-2026-104006
    14Monitor

    SpeedyCache <= 1.4.2 - Unauthenticated Sensitive Information Exposure via Insecure Cache Configuration via Cache Write Gate Missing comment_author_* Cookie Chec

    LowCVSS 3.7No exploitEPSS 0%

    softaculous · speedycache – cache, optimization, performance3 days ago

  • CVE-2026-103998
    24Monitor

    Form Maker by 10Web <= 1.15.48 - Reflected Cross-Site Scripting via 'inputs' Parameter Array Key

    MediumCVSS 6.1No exploitEPSS 0%

    10web · form maker by 10web – mobile-friendly drag & drop contact form builder3 days ago

  • CVE-2026-96743
    25Monitor

    Table Field Add-on for ACF and SCF <= 1.4.1-RC2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Table Field Value

    MediumCVSS 6.4No exploitEPSS 0%

    jonua · table field add-on for acf and scf3 days ago

  • CVE-2026-97341
    28Monitor

    Visitor Traffic Real Time Statistics <= 8.16 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header

    HighCVSS 7.2No exploitEPSS 0%

    wp-buy · visitor traffic real time statisticsOct 3, 2026

  • CVE-2026-97337
    30Monitor

    Simple Membership <= 4.8.3 - Missing Authorization to Unauthenticated Account Takeover and Sensitive Information Disclosure via 'email' Parameter on Activation

    HighCVSS 7.5No exploitEPSS 0%

    wpinsider-1 · simple membershipOct 3, 2026

  • CVE-2026-103888
    24Monitor

    WPC Smart Quick View for WooCommerce <= 4.4.0 - Reflected Cross-Site Scripting via 'woosq-redirect' Parameter

    MediumCVSS 6.1No exploitEPSS 0%

    wpclever · wpc smart quick view for woocommerceOct 3, 2026

  • CVE-2026-100152
    26Monitor

    All in One SEO <= 5.0.2 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Query Parameter

    MediumCVSS 6.5No exploitEPSS 0%

    smub · all in one seo – ai seo plugin to boost seo rankings & traffic (schema, local seo, sitemap & seo insights)Oct 3, 2026

  • CVE-2026-96567
    28Monitor

    MW WP Form <= 5.1.7 - Unauthenticated Stored Cross-Site Scripting via 'post_id' Parameter (via stored form-submitted post meta)

    HighCVSS 7.2No exploitEPSS 0%

    websoudan · mw wp formOct 2, 2026

  • CVE-2026-102772
    28Monitor

    CMB2 <= 2.13.1 - Unauthenticated Stored Cross-Site Scripting via 'textarea_code' Field

    HighCVSS 7.2No exploitEPSS 0%

    jtsternberg · cmb2Oct 2, 2026

  • CVE-2026-92244
    28Monitor

    PDF Invoices & Packing Slips for WooCommerce <= 5.16.1 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company Fields

    HighCVSS 7.2No exploitEPSS 0%

    wpovernight · pdf invoices & packing slips for woocommerceOct 1, 2026

  • CVE-2026-89427
    24Monitor

    Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via 's' Search Parameter

    MediumCVSS 6.1No exploitEPSS 0%

    spacetime · ad inserter – ad manager & adsense adsOct 1, 2026

  • CVE-2026-89424
    25Monitor

    Duplicate Post <= 1.5.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'noti_token' Parameter

    MediumCVSS 6.4No exploitEPSS 0%

    inisev · duplicate postOct 1, 2026

  • CVE-2026-92229
    36Monitor

    Forminator Forms <= 1.57.2 - Unauthenticated Arbitrary Shortcode Execution via 'current_url' Parameter

    CriticalCVSS 9.1Proof of conceptEPSS 1%

    wpmudev · forminator forms – contact form, payment form & custom form builderSep 18, 2026

  • CVE-2026-92554
    24Monitor

    ShopLentor <= 3.5.1 - Reflected Cross-Site Scripting via Query-String Parameter Name

    MediumCVSS 6.1No exploitEPSS 0%

    devitemsllc · shoplentor – all-in-one woocommerce growth & store enhancement pluginSep 18, 2026

  • CVE-2026-84960
    24Monitor

    WP-Members Membership Plugin <= 3.5.6 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    cbutlerjr · wp-members membership pluginSep 11, 2026

  • CVE-2026-77150
    24Monitor

    Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    unitecms · unlimited elements for elementorSep 11, 2026

  • CVE-2026-18562
    24Monitor

    HUSKY <= 1.4.3 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    realmag777 · husky – products filter for woocommerce professionalSep 11, 2026

  • CVE-2026-83627
    39Monitor

    Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN <= 3.21.0 - Unauthenticated Remote Code Execution via Cookie Name in Page Cache Debug Log

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    wpmudev · hummingbird performance – cache & page speed optimization for core web vitals | critical css | minify css | defer css javascript | cdnSep 5, 2026