CraCkEr
9 credited records · 9 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
20Monitor | CVE-2023-54364No exploit | Joomla HikaShop 4.7.4 Reflected XSS via Product Filterhikashop · joomla hikashop · CWE-79 | Medium5.1 | — | 0.2% | Apr 9, 2026 |
20Monitor | CVE-2023-54363No exploit | Joomla Solidres 2.13.3 Reflected XSS via Multiple Parameterssolidres · joomla solidres · CWE-79 | Medium5.1 | — | 0.2% | Apr 9, 2026 |
20Monitor | CVE-2023-54362No exploit | Joomla VirtueMart Shopping-Cart 4.0.12 Reflected XSS via keywordvirtuemart · cart · CWE-79 | Medium5.1 | — | 0.2% | Apr 9, 2026 |
20Monitor | CVE-2023-54361No exploit | Joomla iProperty Real Estate 4.1.1 Reflected XSS via filter_keywordthethinkery · joomla iproperty real estate · CWE-79 | Medium5.1 | — | 0.2% | Apr 9, 2026 |
20Monitor | CVE-2023-54360No exploit | Joomla JLex Review 6.0.1 Reflected XSS via review_id Parameterjlexart · joomla jlex review · CWE-79 | Medium5.1 | — | 0.2% | Apr 9, 2026 |
35Monitor | CVE-2023-54359No exploit | WordPress adivaha Travel Plugin 2.3 SQL Injection via pidadivaha · wordpress adivaha travel plugin · CWE-89 | High8.8 | — | 0.3% | Apr 9, 2026 |
20Monitor | CVE-2023-54358No exploit | WordPress adivaha Travel Plugin 2.3 Reflected XSS via isMobileadivaha · wordpress adivaha travel plugin · CWE-79 | Medium5.1 | — | 0.3% | Apr 9, 2026 |
20Monitor | CVE-2023-53882No exploit | JLex GuestBook 1.6.4 Reflected Cross-Site Scripting via URL Parameterjlexart · jlex guestbook · CWE-79 | Medium5.1 | — | 0.4% | Dec 15, 2025 |
20Monitor | CVE-2023-53876No exploit | Academy LMS 6.1 Arbitrary File Upload Vulnerability via Profile Settingscreativeitem · academy lms · CWE-434 | Medium5.1 | — | 0.2% | Dec 15, 2025 |
- CVE-2023-5436420Monitor
Joomla HikaShop 4.7.4 Reflected XSS via Product Filter
MediumCVSS 5.1No exploitEPSS 0%hikashop · joomla hikashopApr 9, 2026
- CVE-2023-5436320Monitor
Joomla Solidres 2.13.3 Reflected XSS via Multiple Parameters
MediumCVSS 5.1No exploitEPSS 0%solidres · joomla solidresApr 9, 2026
- CVE-2023-5436220Monitor
Joomla VirtueMart Shopping-Cart 4.0.12 Reflected XSS via keyword
MediumCVSS 5.1No exploitEPSS 0%virtuemart · cartApr 9, 2026
- CVE-2023-5436120Monitor
Joomla iProperty Real Estate 4.1.1 Reflected XSS via filter_keyword
MediumCVSS 5.1No exploitEPSS 0%thethinkery · joomla iproperty real estateApr 9, 2026
- CVE-2023-5436020Monitor
Joomla JLex Review 6.0.1 Reflected XSS via review_id Parameter
MediumCVSS 5.1No exploitEPSS 0%jlexart · joomla jlex reviewApr 9, 2026
- CVE-2023-5435935Monitor
WordPress adivaha Travel Plugin 2.3 SQL Injection via pid
HighCVSS 8.8No exploitEPSS 0%adivaha · wordpress adivaha travel pluginApr 9, 2026
- CVE-2023-5435820Monitor
WordPress adivaha Travel Plugin 2.3 Reflected XSS via isMobile
MediumCVSS 5.1No exploitEPSS 0%adivaha · wordpress adivaha travel pluginApr 9, 2026
- CVE-2023-5388220Monitor
JLex GuestBook 1.6.4 Reflected Cross-Site Scripting via URL Parameter
MediumCVSS 5.1No exploitEPSS 0%jlexart · jlex guestbookDec 15, 2025
- CVE-2023-5387620Monitor
Academy LMS 6.1 Arbitrary File Upload Vulnerability via Profile Settings
MediumCVSS 5.1No exploitEPSS 0%creativeitem · academy lmsDec 15, 2025