Skip to content
Noroxi

Michael

Patchstack Bug Bounty Program

42 credited records · 4 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers
  • CVE-2026-39934
    27Monitor

    Growth Experiments ReassignMenteesJob runs as an infinite loop

    MediumCVSS 6.9No exploitEPSS 0%

    the wikimedia foundation · mediawiki - growthexperiments extensionApr 7, 2026

  • CVE-2024-52387
    23Monitor

    WordPress Master Addons plugin <= 2.0.9.9.4 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    liton arefin · master addons for elementorFeb 20, 2026

  • CVE-2024-43228
    21Monitor

    WordPress SecuPress Free plugin <= 2.2.5.3 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    secupress · secupress freeFeb 20, 2026

  • CVE-2025-62923
    26Monitor

    WordPress Marquee Addons for Elementor plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    debuggers studio · marquee addons for elementorOct 26, 2025

  • CVE-2025-59574
    26Monitor

    WordPress WP Travel Engine Plugin <= 1.4.2 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    wp travel engine · wp travel engineSep 22, 2025

  • CVE-2025-59553
    26Monitor

    WordPress Custom iFrame for Elementor Plugin <= 1.0.13 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    coderz studio · custom iframe for elementorSep 22, 2025

  • CVE-2025-58264
    26Monitor

    WordPress JupiterX Core Plugin <= 4.11.0 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    artbees · jupiterx coreSep 22, 2025

  • CVE-2025-58593
    26Monitor

    WordPress Orbit Fox by ThemeIsle Plugin <= 3.0.0 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    themeisle · orbit fox by themeisleSep 3, 2025

  • CVE-2024-37945
    26Monitor

    WordPress WPBITS Addons For Elementor plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    wpbits · wpbits addons for elementor page builderAug 14, 2025

  • CVE-2025-46263
    26Monitor

    WordPress Author Box After Posts plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    lloyd saunders · author box after postsMay 19, 2025

  • CVE-2025-48288
    26Monitor

    WordPress ElementInvader Addons for Elementor plugin <= 1.3.5 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    element invader · elementinvader addons for elementorMay 19, 2025

  • CVE-2025-48132
    21Monitor

    WordPress X Addons for Elementor plugin <= 1.0.16 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    pencilwp · x addons for elementorMay 16, 2025

  • CVE-2025-48131
    26Monitor

    WordPress UltraAddons Elementor Lite plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    saiful islam · ultraaddons elementor liteMay 16, 2025

  • CVE-2025-47476
    26Monitor

    WordPress Cost Calculator for Elementor plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    add-ons.org · cost calculator for elementorMay 7, 2025

  • CVE-2025-47475
    26Monitor

    WordPress JupiterX Core plugin <= 4.8.11 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    artbees · jupiterx coreMay 7, 2025

  • CVE-2025-46472
    26Monitor

    WordPress The Pack Elementor addons plugin <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    webangon · the pack elementor addonsApr 24, 2025

  • CVE-2025-32067
    21Monitor

    i18n XSS vulnerability in message growthexperiments

    MediumCVSS 5.4No exploitEPSS 0%

    the wikimedia foundation · mediawiki - growth experiments extensionApr 11, 2025

  • CVE-2025-32194
    26Monitor

    WordPress LA-Studio Element Kit for Elementor plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    la-studio · la-studio element kit for elementorApr 4, 2025

  • CVE-2025-32192
    26Monitor

    WordPress Ultra Addons Lite for Elementor plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    ultrapress · ultra addons lite for elementorApr 4, 2025

  • CVE-2025-31869
    26Monitor

    WordPress Black Widgets For Elementor plugin <= 1.3.9 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    modernaweb studio · black widgets for elementorApr 1, 2025

  • CVE-2025-31792
    23Monitor

    WordPress Piotnet Forms plugin <= 1.0.30 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    piotnetdotcom · piotnet formsApr 1, 2025

  • CVE-2025-22646
    21Monitor

    WordPress aThemes Addons for Elementor plugin <= 1.0.8 - Stored Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    athemes · athemes addons for elementorMar 27, 2025

  • CVE-2025-22642
    26Monitor

    WordPress Dynamic Conditions plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    rtowebsites · dynamic conditionsFeb 4, 2025

  • CVE-2025-24729
    21Monitor

    WordPress ElementInvader Addons for Elementor plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    elementinvader · elementinvader addons for elementorJan 24, 2025

  • CVE-2025-22339
    26Monitor

    WordPress Store Commerce theme <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    athemeart · store commerceJan 7, 2025