Skip to content
Noroxi

Bugbang

9 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers
  • CVE-2021-24384
    40Plan

    JoomSport < 5.1.8 - Unauthenticated PHP Object Injection

    CriticalCVSS 9.8No exploitEPSS 2%

    beardev · joomsportJul 6, 2021

  • CVE-2021-24195
    35Monitor

    Login as User or Customer (User Switching) < 1.9 - Arbitrary Plugin Installation/Activation via Low Privilege User

    HighCVSS 8.8No exploitEPSS 1%

    wp-buy · login as user or customer \(user switching\)May 14, 2021

  • CVE-2021-24194
    35Monitor

    Login Protection - Limit Failed Login Attempts < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege User

    HighCVSS 8.8No exploitEPSS 1%

    wp-buy · login protection - limit failed login attemptsMay 14, 2021

  • CVE-2021-24193
    35Monitor

    Visitor Traffic Real Time Statistics < 2.12 - Arbitrary Plugin Installation/Activation via Low Privilege User

    HighCVSS 8.8No exploitEPSS 1%

    wp-buy · visitor traffic real time statisticsMay 14, 2021

  • CVE-2021-24192
    35Monitor

    Tree Sitemap < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege User

    HighCVSS 8.8No exploitEPSS 1%

    sitemap project · sitemapMay 14, 2021

  • CVE-2021-24191
    35Monitor

    WP Maintenance Mode & Site Under Construction < 1.8.2 - Arbitrary Plugin Installation/Activation via Low Privilege User

    HighCVSS 8.8No exploitEPSS 1%

    wpshopmart · coming soon page \& maintenance modeMay 14, 2021

  • CVE-2021-24190
    35Monitor

    WooCommerce Conditional Marketing Mailer < 1.5.2 - Arbitrary Plugin Installation/Activation via Low Privilege User

    HighCVSS 8.8No exploitEPSS 1%

    wp-buy · conditional marketing mailerMay 14, 2021

  • CVE-2021-24189
    35Monitor

    Captchinoo, Google recaptcha for admin login page < 2.4 - Arbitrary Plugin Installation/Activation via Low Privilege User

    HighCVSS 8.8No exploitEPSS 1%

    wp-buy · captchinooMay 14, 2021

  • CVE-2021-24188
    35Monitor

    WP Content Copy Protection & No Right Click < 3.1.5 - Arbitrary Plugin Installation/Activation via Low Privilege User

    HighCVSS 8.8No exploitEPSS 1%

    wp-buy · wp content copy protection \& no right clickMay 14, 2021