Aiden
Patchstack Bug Bounty Program
72 credited records · 8 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2025-15656No exploit | WordPress School Management plugin <= 93.2.0 - Privilege Escalation vulnerabilitymojoomla · school management · CWE-266 | High8.8 | — | 0.2% | Jun 3, 2026 |
30Monitor | CVE-2025-15655No exploit | WordPress School Management plugin <= 93.2.0 - SQL Injection vulnerabilitymojoomla · school management · CWE-89 | High7.6 | — | 0.2% | Jun 3, 2026 |
34Monitor | CVE-2026-22460No exploit | WordPress FormGent plugin <= 1.7.0 - Arbitrary File Deletion vulnerabilitywpwax · formgent · CWE-22 | High8.6 | — | 0.4% | Mar 5, 2026 |
37Monitor | CVE-2025-32303No exploit | WordPress WPCHURCH plugin <= 2.7.0 - SQL Injection Vulnerabilitymojoomla · wpchurch · CWE-89 | Critical9.3 | — | 0.2% | Jan 7, 2026 |
35Monitor | CVE-2025-31643No exploit | WordPress WPCHURCH plugin <= 2.7.0 - Privilege Escalation Vulnerabilitydasinfomedia · wpchurch · CWE-266 | High8.8 | — | 0.3% | Jan 7, 2026 |
28Monitor | CVE-2025-31642No exploit | WordPress WPCHURCH plugin <= 2.7.0 - Reflected Cross Site Scripting (XSS) vulnerabilitydasinfomedia · wpchurch · CWE-79 | High7.1 | — | 0.1% | Jan 7, 2026 |
32Monitor | CVE-2025-32304No exploit | WordPress WPCHURCH plugin <= 2.7.0 - Local File Inclusion vulnerabilitymojoomla · wpchurch · CWE-98 | High8.1 | — | 0.4% | Jan 6, 2026 |
39Monitor | CVE-2025-62047No exploit | WordPress Case Addons plugin < 1.3.0 - Arbitrary File Upload vulnerabilitycase-themes · case addons · CWE-434 | Critical9.9 | — | 0.4% | Nov 6, 2025 |
39Monitor | CVE-2025-62025No exploit | WordPress JobSearch plugin < 3.0.8 - PHP Object Injection vulnerabilityeyecix · jobsearch · CWE-502 | Critical9.8 | — | 0.5% | Oct 22, 2025 |
39Monitor | CVE-2025-60213No exploit | WordPress Scape theme <= 1.5.13 - PHP Object Injection vulnerabilitywhitebox-studio · scape · CWE-502 | Critical9.8 | — | 0.5% | Oct 22, 2025 |
39Monitor | CVE-2025-49380No exploit | WordPress WooCommerce Vehicle Parts Finder plugin <= 3.7 - PHP Object Injection vulnerabilitywpinstinct · woocommerce vehicle parts finder · CWE-502 | Critical9.8 | — | 0.5% | Oct 22, 2025 |
34Monitor | CVE-2025-49402No exploit | WordPress Exertio Framework Plugin <= 1.3.3 - SQL Injection Vulnerabilityscriptsbundle · exertio framework · CWE-89 | High8.5 | — | 0.3% | Aug 28, 2025 |
39Monitor | CVE-2025-54725No exploit | WordPress Golo Theme <= 1.7.0 - Broken Authentication Vulnerabilityuxper · golo · CWE-288 | Critical9.8 | — | 0.4% | Aug 28, 2025 |
39Monitor | CVE-2025-54014No exploit | WordPress MediCenter - Health Medical Clinic <= 15.1 - PHP Object Injection Vulnerabilityquanticalabs · medicenter - health medical clinic · CWE-502 | Critical9.8 | — | 0.3% | Aug 20, 2025 |
39Monitor | CVE-2025-54686No exploit | WordPress Exertio Theme <= 1.3.2 - PHP Object Injection Vulnerabilityscriptsbundle · exertio · CWE-502 | Critical9.8 | — | 0.3% | Aug 14, 2025 |
30Monitor | CVE-2025-52804No exploit | WordPress Nuss theme <= 1.3.7.1 - Broken Access Control Vulnerabilityuxper · nuss · CWE-862 | High7.5 | — | 0.3% | Jul 16, 2025 |
37Monitor | CVE-2025-52714No exploit | WordPress Traveler theme < 3.2.2 - SQL Injection Vulnerabilityshinetheme · traveler · CWE-89 | Critical9.3 | — | 0.4% | Jul 16, 2025 |
37Monitor | CVE-2025-52833No exploit | WordPress LMS theme <= 9.2 - SQL Injection Vulnerabilitydesignthemes · lms · CWE-89 | Critical9.3 | — | 0.3% | Jul 4, 2025 |
35Monitor | CVE-2025-52828No exploit | WordPress Red Art theme <= 3.8 - PHP Object Injection Vulnerabilitydesignthemes · red art · CWE-502 | High8.8 | — | 0.4% | Jul 4, 2025 |
39Monitor | CVE-2025-49867No exploit | WordPress RealHomes theme <= 4.4.0 - Privilege Escalation vulnerabilityinspirythemes · realhomes · CWE-266 | Critical9.8 | — | 0.3% | Jul 4, 2025 |
40Plan | CVE-2025-30933No exploit | WordPress LogisticsHub theme <= 1.1.6 - Arbitrary File Upload Vulnerabilityliquidthemes · logisticshub · CWE-434 | Critical10.0 | — | 0.3% | Jul 4, 2025 |
37Monitor | CVE-2025-52834No exploit | WordPress Homey theme <= 2.4.7 - SQL Injection vulnerabilityfavethemes · homey · CWE-89 | Critical9.3 | — | 0.3% | Jun 27, 2025 |
35Monitor | CVE-2025-52827No exploit | WordPress Nuss theme <= 1.3.3 - PHP Object Injection Vulnerabilityuxper · nuss · CWE-502 | High8.8 | — | 0.4% | Jun 27, 2025 |
28Monitor | CVE-2025-52799No exploit | WordPress LMS theme <= 9.2 - Reflected Cross Site Scripting (XSS) Vulnerabilitydesignthemes · lms · CWE-79 | High7.1 | — | 0.2% | Jun 27, 2025 |
28Monitor | CVE-2025-24774No exploit | WordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerabilitymojoomla · wpcrm - crm for contact form cf7 & woocommerce · CWE-79 | High7.1 | — | 0.2% | Jun 27, 2025 |
- CVE-2025-1565635Monitor
WordPress School Management plugin <= 93.2.0 - Privilege Escalation vulnerability
HighCVSS 8.8No exploitEPSS 0%mojoomla · school managementJun 3, 2026
- CVE-2025-1565530Monitor
WordPress School Management plugin <= 93.2.0 - SQL Injection vulnerability
HighCVSS 7.6No exploitEPSS 0%mojoomla · school managementJun 3, 2026
- CVE-2026-2246034Monitor
WordPress FormGent plugin <= 1.7.0 - Arbitrary File Deletion vulnerability
HighCVSS 8.6No exploitEPSS 0%wpwax · formgentMar 5, 2026
- CVE-2025-3230337Monitor
WordPress WPCHURCH plugin <= 2.7.0 - SQL Injection Vulnerability
CriticalCVSS 9.3No exploitEPSS 0%mojoomla · wpchurchJan 7, 2026
- CVE-2025-3164335Monitor
WordPress WPCHURCH plugin <= 2.7.0 - Privilege Escalation Vulnerability
HighCVSS 8.8No exploitEPSS 0%dasinfomedia · wpchurchJan 7, 2026
- CVE-2025-3164228Monitor
WordPress WPCHURCH plugin <= 2.7.0 - Reflected Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%dasinfomedia · wpchurchJan 7, 2026
- CVE-2025-3230432Monitor
WordPress WPCHURCH plugin <= 2.7.0 - Local File Inclusion vulnerability
HighCVSS 8.1No exploitEPSS 0%mojoomla · wpchurchJan 6, 2026
- CVE-2025-6204739Monitor
WordPress Case Addons plugin < 1.3.0 - Arbitrary File Upload vulnerability
CriticalCVSS 9.9No exploitEPSS 0%case-themes · case addonsNov 6, 2025
- CVE-2025-6202539Monitor
WordPress JobSearch plugin < 3.0.8 - PHP Object Injection vulnerability
CriticalCVSS 9.8No exploitEPSS 0%eyecix · jobsearchOct 22, 2025
- CVE-2025-6021339Monitor
WordPress Scape theme <= 1.5.13 - PHP Object Injection vulnerability
CriticalCVSS 9.8No exploitEPSS 0%whitebox-studio · scapeOct 22, 2025
- CVE-2025-4938039Monitor
WordPress WooCommerce Vehicle Parts Finder plugin <= 3.7 - PHP Object Injection vulnerability
CriticalCVSS 9.8No exploitEPSS 0%wpinstinct · woocommerce vehicle parts finderOct 22, 2025
- CVE-2025-4940234Monitor
WordPress Exertio Framework Plugin <= 1.3.3 - SQL Injection Vulnerability
HighCVSS 8.5No exploitEPSS 0%scriptsbundle · exertio frameworkAug 28, 2025
- CVE-2025-5472539Monitor
WordPress Golo Theme <= 1.7.0 - Broken Authentication Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%uxper · goloAug 28, 2025
- CVE-2025-5401439Monitor
WordPress MediCenter - Health Medical Clinic <= 15.1 - PHP Object Injection Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%quanticalabs · medicenter - health medical clinicAug 20, 2025
- CVE-2025-5468639Monitor
WordPress Exertio Theme <= 1.3.2 - PHP Object Injection Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%scriptsbundle · exertioAug 14, 2025
- CVE-2025-5280430Monitor
WordPress Nuss theme <= 1.3.7.1 - Broken Access Control Vulnerability
HighCVSS 7.5No exploitEPSS 0%uxper · nussJul 16, 2025
- CVE-2025-5271437Monitor
WordPress Traveler theme < 3.2.2 - SQL Injection Vulnerability
CriticalCVSS 9.3No exploitEPSS 0%shinetheme · travelerJul 16, 2025
- CVE-2025-5283337Monitor
WordPress LMS theme <= 9.2 - SQL Injection Vulnerability
CriticalCVSS 9.3No exploitEPSS 0%designthemes · lmsJul 4, 2025
- CVE-2025-5282835Monitor
WordPress Red Art theme <= 3.8 - PHP Object Injection Vulnerability
HighCVSS 8.8No exploitEPSS 0%designthemes · red artJul 4, 2025
- CVE-2025-4986739Monitor
WordPress RealHomes theme <= 4.4.0 - Privilege Escalation vulnerability
CriticalCVSS 9.8No exploitEPSS 0%inspirythemes · realhomesJul 4, 2025
- CVE-2025-3093340Plan
WordPress LogisticsHub theme <= 1.1.6 - Arbitrary File Upload Vulnerability
CriticalCVSS 10.0No exploitEPSS 0%liquidthemes · logisticshubJul 4, 2025
- CVE-2025-5283437Monitor
WordPress Homey theme <= 2.4.7 - SQL Injection vulnerability
CriticalCVSS 9.3No exploitEPSS 0%favethemes · homeyJun 27, 2025
- CVE-2025-5282735Monitor
WordPress Nuss theme <= 1.3.3 - PHP Object Injection Vulnerability
HighCVSS 8.8No exploitEPSS 0%uxper · nussJun 27, 2025
- CVE-2025-5279928Monitor
WordPress LMS theme <= 9.2 - Reflected Cross Site Scripting (XSS) Vulnerability
HighCVSS 7.1No exploitEPSS 0%designthemes · lmsJun 27, 2025
- CVE-2025-2477428Monitor
WordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%mojoomla · wpcrm - crm for contact form cf7 & woocommerceJun 27, 2025