Skip to content
Noroxi

minhtuanact (Patchstack Alliance)

64 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers
  • CVE-2023-35046
    21Monitor

    WordPress Dynamic Visibility for Elementor plugin <= 5.0.5 - Broken Access Control vulnerability

    MediumCVSS 5.4No exploitEPSS 1%

    dynamic.ooo · dynamic visibility for elementorDec 13, 2024

  • CVE-2023-32507
    29Monitor

    WordPress Woo Custom Emails plugin <= 2.2 - Broken Access Control vulnerability

    HighCVSS 7.3No exploitEPSS 1%

    wp3sixty · woo custom emailsDec 13, 2024

  • CVE-2023-29422
    17Monitor

    WordPress Dynamics 365 Integration plugin <= 1.3.13 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    alexacrm · dynamics 365 integrationDec 9, 2024

  • CVE-2023-25699
    39Monitor

    WordPress VideoWhisper Live Streaming Integration plugin <= 5.5.15 - Remote Code Execution (RCE)

    CriticalCVSS 9.8No exploitEPSS 1%

    videowhisper · videowhisper live streaming integrationApr 3, 2024

  • CVE-2023-32517
    24Monitor

    WordPress MailChimp Subscribe Forms Plugin <= 4.0.9.3 is vulnerable to Open Redirection

    MediumCVSS 6.1No exploitEPSS 0%

    ibericode · mailchimpDec 29, 2023

  • CVE-2023-28788
    35Monitor

    WordPress Advanced Page Visit Counter Plugin <= 6.4.2 is vulnerable to SQL Injection

    HighCVSS 8.8No exploitEPSS 1%

    pagevisitcounter · advanced page visit counterDec 20, 2023

  • CVE-2023-28491
    28Monitor

    WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to SQL Injection

    HighCVSS 7.2No exploitEPSS 1%

    tribulant · slideshow galleryDec 20, 2023

  • CVE-2023-45105
    24Monitor

    WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.3.9 is vulnerable to Open Redirection

    MediumCVSS 6.1No exploitEPSS 0%

    servit · affiliate-toolkitDec 19, 2023

  • CVE-2023-40602
    24Monitor

    WordPress Doofinder for WooCommerce Plugin <= 1.5.49 is vulnerable to Open Redirection

    MediumCVSS 6.1No exploitEPSS 0%

    doofinder · doofinderDec 19, 2023

  • CVE-2023-47548
    24Monitor

    WordPress Integrate Google Drive Plugin <= 1.3.2 is vulnerable to Open Redirection

    MediumCVSS 6.1No exploitEPSS 0%

    softlabbd · integrate google driveDec 7, 2023

  • CVE-2023-48325
    24Monitor

    WordPress Landing Page Builder Plugin <= 1.5.1.5 is vulnerable to Open Redirection

    MediumCVSS 6.1No exploitEPSS 0%

    pluginops · landing page builderDec 7, 2023

  • CVE-2023-45834
    21Monitor

    WordPress Libsyn Publisher Hub Plugin <= 1.4.4 is vulnerable to Sensitive Data Exposure

    MediumCVSS 5.3No exploitEPSS 1%

    libsyn · libsyn publisher hubNov 30, 2023

  • CVE-2023-47549
    24Monitor

    WordPress EazyDocs Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    spider-themes · eazydocsNov 14, 2023

  • CVE-2023-46084
    35Monitor

    WordPress Icons Font Loader Plugin <= 1.1.2 is vulnerable to SQL Injection

    HighCVSS 8.8No exploitEPSS 1%

    bplugins · icons font loaderNov 6, 2023

  • CVE-2023-45830
    39Monitor

    WordPress Accessibility Suite by Online ADA Plugin <= 4.12 is vulnerable to SQL Injection

    CriticalCVSS 9.8No exploitEPSS 1%

    adaplugin · accessibility suite by online adaNov 6, 2023

  • CVE-2023-40609
    39Monitor

    WordPress Contact form 7 Custom validation Plugin <= 1.1.3 is vulnerable to SQL Injection

    CriticalCVSS 9.8No exploitEPSS 1%

    rocklobster · contact form 7 custom validationNov 6, 2023

  • CVE-2023-40207
    39Monitor

    WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to SQL Injection

    CriticalCVSS 9.8No exploitEPSS 1%

    rednao · donations made easy - smart donationsNov 6, 2023

  • CVE-2023-28748
    39Monitor

    WordPress Copy Or Move Comments Plugin <= 5.0.4 is vulnerable to SQL Injection

    CriticalCVSS 9.8No exploitEPSS 1%

    appjetty · copy or move commentsNov 6, 2023

  • CVE-2022-47432
    39Monitor

    WordPress Shortcode IMDB Plugin <= 6.0.8 is vulnerable to SQL Injection

    CriticalCVSS 9.8No exploitEPSS 1%

    kemalyazici · shortcode imdbNov 6, 2023

  • CVE-2022-47430
    39Monitor

    WordPress The School Management – Education & Learning Management Plugin <= 4.1 is vulnerable to SQL Injection

    CriticalCVSS 9.8No exploitEPSS 1%

    weblizar · school management - education \& learning managementNov 6, 2023

  • CVE-2022-47420
    39Monitor

    WordPress Accessibility Suite by Online ADA Plugin <= 4.12 is vulnerable to SQL Injection

    CriticalCVSS 9.8No exploitEPSS 0%

    adaplugin · accessibility suite by online adaNov 6, 2023

  • CVE-2023-38391
    28Monitor

    WordPress Onepage Builder – Easiest Landing Page Builder For WordPress Plugin <= 2.4.1 is vulnerable to SQL Injection

    HighCVSS 7.2No exploitEPSS 1%

    themesgrove · onepage builderNov 3, 2023

  • CVE-2023-32508
    28Monitor

    WordPress Order Your Posts Manually Plugin <= 2.2.5 is vulnerable to SQL Injection

    HighCVSS 7.2No exploitEPSS 1%

    cagewebdev · order your posts manuallyNov 3, 2023

  • CVE-2022-47426
    39Monitor

    WordPress Neshan Maps Plugin <= 1.1.4 is vulnerable to SQL Injection

    CriticalCVSS 9.8No exploitEPSS 1%

    neshan · neshan mapsNov 3, 2023

  • CVE-2022-47588
    39Monitor

    WordPress Simple Photo Gallery Plugin <= v1.8.1 is vulnerable to SQL Injection

    CriticalCVSS 9.8No exploitEPSS 1%

    tipsandtricks-hq · simple photo galleryNov 3, 2023