Skip to content
Noroxi

AndrewN

Patchstack Bug Bounty Program

20 credited records · 20 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for AndrewN

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-39786
    28Monitor

    WordPress BA Book Everything plugin <= 1.8.33 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    bookingalgorithms · ba book everything1 day ago

  • CVE-2026-65566
    35Monitor

    WordPress AI Engine plugin <= 3.8.8 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    meow apps · ai engine1 day ago

  • CVE-2026-61988
    28Monitor

    WordPress Auction Nudge – Your eBay on Your Site plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    morehawes · auction nudge – your ebay on your site3 days ago

  • CVE-2026-115965
    34Monitor

    WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability

    HighCVSS 8.5No exploitEPSS 0%

    buddypress · buddypress3 days ago

  • CVE-2026-115612
    28Monitor

    WordPress SliceWP plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    iova.mihai · slicewp4 days ago

  • CVE-2026-115609
    28Monitor

    WordPress GetPaid plugin <= 2.8.62 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    stiofan · getpaid4 days ago

  • CVE-2026-115593
    28Monitor

    WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    unlimited elements · unlimited elements for elementor (free widgets, addons, templates)4 days ago

  • CVE-2026-111411
    37Monitor

    WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability

    CriticalCVSS 9.3No exploitEPSS 0%

    aman · funnelkit automations4 days ago

  • CVE-2026-111841
    35Monitor

    WordPress FunnelKit Automations plugin <= 3.8.5.2 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    aman · funnelkit automations6 days ago

  • CVE-2026-114694
    28Monitor

    WordPress Events Manager plugin <= 7.4.8 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    pixelite · events managerOct 24, 2026

  • CVE-2026-112379
    28Monitor

    WordPress Contact Form Email plugin <= 1.3.68 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    codepeople · contact form emailOct 22, 2026

  • CVE-2026-110887
    39Monitor

    WordPress HivePress plugin <= 1.7.32 - Remote Code Execution (RCE) vulnerability

    CriticalCVSS 9.9No exploitEPSS 0%

    hivepress · hivepressOct 19, 2026

  • CVE-2026-110901
    21Monitor

    WordPress SmartCrawl plugin <= 3.16.4 - Insecure Direct Object References (IDOR) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    wpmu dev · smartcrawlOct 16, 2026

  • CVE-2026-109698
    37Monitor

    WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerability

    CriticalCVSS 9.3No exploitEPSS 0%

    kitae park · mang board wpOct 15, 2026

  • CVE-2026-109695
    30Monitor

    WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    wpmanageninja · fluentcartOct 15, 2026

  • CVE-2026-109694
    39Monitor

    WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    wp manageninja llc · fluent crmOct 15, 2026

  • CVE-2026-108497
    37Monitor

    WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability

    CriticalCVSS 9.3No exploitEPSS 0%

    tms · ameliaOct 15, 2026

  • CVE-2026-108491
    28Monitor

    WordPress Everest Forms plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    everest forms · everest formsOct 15, 2026

  • CVE-2026-108484
    28Monitor

    WordPress Best Payments Plugin for WP plugin <= 4.6.27 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    wpmanageninja · best payments plugin for wpOct 14, 2026

  • CVE-2026-108291
    39Monitor

    WordPress Affiliates plugin <= 7.0.1 - PHP Object Injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    itthinx · affiliatesOct 14, 2026