Skip to content
Noroxi

BEE-K (Patchstack)

13 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers
  • CVE-2022-30536
    19Monitor

    WordPress WP Maintenance plugin <= 6.0.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 1%

    wp maintenance project · wp maintenanceJul 21, 2022

  • CVE-2022-32289
    17Monitor

    WordPress Popup Builder plugin <= 4.1.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Popup Status Change

    MediumCVSS 4.3No exploitEPSS 0%

    sygnoos · popup builderJul 21, 2022

  • CVE-2022-29441
    17Monitor

    WordPress Private Messages For WordPress plugin <= 2.1.10 - Sending Messages via Cross-Site Request Forgery (CSRF) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    private messages project · private messagesJun 15, 2022

  • CVE-2022-29438
    19Monitor

    WordPress Image Slider by NextCode plugin <= 1.1.2 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 1%

    nextcode · image slider by nextcodeJun 15, 2022

  • CVE-2022-29437
    35Monitor

    WordPress Image Slider by NextCode plugin <= 1.1.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

    HighCVSS 8.8No exploitEPSS 0%

    nextcode · image slider by nextcodeJun 15, 2022

  • CVE-2022-29408
    24Monitor

    WordPress Advanced Contact form 7 DB plugin <= 1.8.7 - Unauthenticated Persistent Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 1%

    vsourz · advanced cf7 dbMay 25, 2022

  • CVE-2022-29431
    21Monitor

    Remove CPT base <= 5.8 - CSRF leads to CPT base deletion

    MediumCVSS 5.4No exploitEPSS 0%

    kubiq · cpt baseMay 20, 2022

  • CVE-2022-29430
    24Monitor

    WordPress PNG to JPG plugin <= 4.0 - Cross-Site Request Forgery (CSRF) leading to Persistent Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    png to jpg project · png to jpgMay 20, 2022

  • CVE-2022-29446
    28Monitor

    WordPress Counter Box plugin <= 1.1.1 - Authenticated Local File Inclusion (LFI) vulnerability

    HighCVSS 7.2No exploitEPSS 1%

    wow-company · counter boxMay 19, 2022

  • CVE-2022-25617
    24Monitor

    WordPress Code Snippets plugin <= 2.14.3 - Reflected Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 1%

    codesnippets · code snippetsMay 18, 2022

  • CVE-2022-29436
    24Monitor

    WordPress Code Snippets Extended plugin <= 1.4.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Persistent Cross-Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    code snippets extended project · code snippets extendedMay 17, 2022

  • CVE-2022-29435
    21Monitor

    WordPress Code Snippets Extended plugin <= 1.4.7 - Cross-Site Request Forgery (CSRF) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    code snippets extended project · code snippets extendedMay 17, 2022

  • CVE-2022-29451
    35Monitor

    WordPress Rara One Click Demo Import plugin <= 1.2.9 - Cross-Site Request Forgery (CSRF) leads to Arbitrary File Upload vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    rarathemes · rara one click demo importApr 29, 2022