Skip to content
Noroxi

braintx

Patchstack Bug Bounty Program

9 credited records · 9 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for braintx

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits every 10 minutes on paid plans, on the hour on the free plan.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • CVE alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools, at most 30 a day (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-121777
    21Monitor

    WordPress Cool Formkit Lite plugin <= 2.7.10 - Content Injection vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    cool plugins · cool formkit lite6 days ago

  • CVE-2026-119507
    21Monitor

    WordPress NotificationX plugin <= 3.3.6 - Content Injection vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    wpdeveloper · notificationx6 days ago

  • CVE-2026-89270
    36Monitor

    Popup Builder <= 4.4.5 - Missing Authorization to Unauthenticated Arbitrary Popup Post Trashing via 'post_type' and 'sg_popup_preview_id' Parameters

    CriticalCVSS 9.1No exploitEPSS 0%

    popupbuilder · popup builder – create highly converting, mobile friendly marketing popups.Oct 31, 2026

  • CVE-2026-110533
    25Monitor

    FV Flowplayer Video Player <= 7.5.55.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Shortcode Attributes

    MediumCVSS 6.4No exploitEPSS 0%

    foliovision · fv flowplayer video playerOct 30, 2026

  • CVE-2026-109193
    28Monitor

    HivePress <= 1.7.32 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value

    HighCVSS 7.2No exploitEPSS 0%

    hivepress · hivepress – business directory, listings & classified ads pluginOct 16, 2026

  • CVE-2026-96648
    25Monitor

    Data Tables Generator by Supsystic <= 1.15.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action

    MediumCVSS 6.4No exploitEPSS 0%

    supsysticcom · data tables generator by supsysticOct 10, 2026

  • CVE-2026-101357
    19Monitor

    SEOPress <= 10.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'seopress_google_analytics_matomo_id' Parameter

    MediumCVSS 4.9No exploitEPSS 0%

    rainbowgeek · seopress – ai seo plugin & on-site seoOct 3, 2026

  • CVE-2026-92826
    24Monitor

    EWWW Image Optimizer <= 8.7.7 - Reflected Cross-Site Scripting via REQUEST_URI Parameter Key

    MediumCVSS 6.1No exploitEPSS 0%

    nosilver4u · ewww image optimizerOct 3, 2026

  • CVE-2026-85645
    24Monitor

    Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.46 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    10web · form maker by 10web – mobile-friendly drag & drop contact form builderSep 10, 2026