Skip to content
Noroxi

abrahack

25 credited records · 7 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for abrahack

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2025-12714
    21Monitor

    Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.271 - Missing Authorization to Unauthenticated Homepage Settings Modification

    MediumCVSS 5.3No exploitEPSS 0%

    rankmath · rank math seo – ai seo tools to dominate seo rankingsMay 29, 2026

  • CVE-2025-10734
    21Monitor

    ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Sensitive Information Expo

    MediumCVSS 5.3No exploitEPSS 0%

    reviewx · reviewx – multi-criteria reviews for woocommerce with google reviews & schemaMar 23, 2026

  • CVE-2025-10731
    21Monitor

    ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Sensitive Information Expo

    MediumCVSS 5.3No exploitEPSS 0%

    reviewx · reviewx – multi-criteria reviews for woocommerce with google reviews & schemaMar 23, 2026

  • CVE-2025-10679
    29Monitor

    ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Limited Remote Code Execut

    HighCVSS 7.3No exploitEPSS 0%

    reviewx · reviewx – multi-criteria reviews for woocommerce with google reviews & schemaMar 23, 2026

  • CVE-2025-10736
    26Monitor

    ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.10 - Incorrect Authorization to Unauthenticated

    MediumCVSS 6.5No exploitEPSS 0%

    reviewx · reviewx – multi-criteria reviews for woocommerce with google reviews & schemaMar 23, 2026

  • CVE-2025-11003
    25Monitor

    UiPress lite <= 3.5.09 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting

    MediumCVSS 6.4No exploitEPSS 0%

    admintwentytwenty · uipress lite | effortless custom dashboards, admin themes and pagesNov 21, 2025

  • CVE-2025-10938
    26Monitor

    UiPress lite <= 3.5.09 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure

    MediumCVSS 6.5No exploitEPSS 0%

    admintwentytwenty · uipress lite | effortless custom dashboards, admin themes and pagesNov 21, 2025

  • CVE-2024-13806
    26Monitor

    Authors List <= 2.0.6 - Unauthenticated Arbitrary Shortcode Execution

    MediumCVSS 6.5No exploitEPSS 0%

    wpkube · authors listMar 1, 2025

  • CVE-2025-1361
    21Monitor

    IP2Location Country Blocker <= 2.38.8 - Missing Authorization to Unauthenticated Information Exposure via admin_init Function

    MediumCVSS 5.3Proof of conceptEPSS 1%

    ip2location · country blockerFeb 22, 2025

  • CVE-2024-13439
    17Monitor

    Team – Team Members Showcase Plugin <= 4.4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Update

    MediumCVSS 4.3No exploitEPSS 0%

    techlabpro · teamFeb 15, 2025

  • CVE-2024-13415
    17Monitor

    Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 5.1.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update

    MediumCVSS 4.3No exploitEPSS 0%

    techlabpro1 · food menu – restaurant menu & online ordering for woocommerceJan 31, 2025

  • CVE-2024-10636
    24Monitor

    Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Reflected DOM-Based Cross-Site Scripting via content

    MediumCVSS 6.1No exploitEPSS 0%

    ays pro plugins · quiz maker developerJan 26, 2025

  • CVE-2024-10633
    29Monitor

    Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated Arbitrary Shortcode Execution via content

    HighCVSS 7.3No exploitEPSS 0%

    ays pro plugins · quiz maker developerJan 26, 2025

  • CVE-2024-10628
    30Monitor

    Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via id

    HighCVSS 7.5No exploitEPSS 0%

    ays-pro · quiz makerJan 26, 2025

  • CVE-2024-10574
    28Monitor

    Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Missing Authorization to Google Sheets Integration Credentials Modification and Stored Cross

    HighCVSS 7.2No exploitEPSS 0%

    ays pro plugins · quiz maker developerJan 26, 2025

  • CVE-2024-13499
    29Monitor

    GamiPress <= 7.2.1 - Unauthenticated Arbitrary Shortcode Execution via gamipress_do_shortcode() Function

    HighCVSS 7.3No exploitEPSS 0%

    gamipress · gamipressJan 22, 2025

  • CVE-2024-13496
    31Monitor

    GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby Parameter

    HighCVSS 7.5Proof of conceptEPSS 2%

    gamipress · gamipressJan 22, 2025

  • CVE-2024-9939
    30Monitor

    WordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.php

    HighCVSS 7.5No exploitEPSS 1%

    iptanus · wordpress file uploadJan 8, 2025

  • CVE-2024-11635
    39Monitor

    WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Execution

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    iptanus · wordpress file uploadJan 8, 2025

  • CVE-2024-11613
    40Plan

    WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion

    CriticalCVSS 9.8Proof of conceptEPSS 4%

    iptanus · wordpress file uploadJan 8, 2025

  • CVE-2024-11868
    21Monitor

    LearnPress – WordPress LMS Plugin <= 4.2.7.3 - Course Material Sensitive Information Exposure via REST API

    MediumCVSS 5.3Proof of conceptEPSS 1%

    thimpress · learnpressDec 10, 2024

  • CVE-2024-10567
    30Monitor

    TI WooCommerce Wishlist <= 2.9.1 - Missing Authorization to Unauthenticated Plugin Setup Wizard Access

    HighCVSS 7.5No exploitEPSS 0%

    templateinvaders · ti woocommerce wishlistDec 4, 2024

  • CVE-2024-10571
    40Plan

    Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source

    CriticalCVSS 9.8Proof of conceptEPSS 4%

    ays-pro · chartifyNov 14, 2024

  • CVE-2024-8529
    60This week

    LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'

    HighCVSS 7.5WeaponizedEPSS 12%

    thimpress · learnpressSep 12, 2024

  • CVE-2024-8522
    60This week

    LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields'

    HighCVSS 7.5WeaponizedEPSS 62%

    thimpress · learnpressSep 12, 2024