Skip to content
Noroxi

Cronus (Patchstack Alliance)

27 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers
  • CVE-2024-43347
    23Monitor

    WordPress Button contact VR plugin <= 4.7.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    virustran · button contact vrAug 18, 2024

  • CVE-2024-38724
    28Monitor

    WordPress Contact Form 7 Summary and Print plugin <= 1.2.5 - Cross Site Request Forgery (CSRF) to XSS vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    muhammad rehman · contact form 7 summary and printAug 13, 2024

  • CVE-2024-37558
    19Monitor

    WordPress WPFavicon plugin <= 2.1.1 - Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 0%

    nihal · wpfaviconJul 21, 2024

  • CVE-2024-37549
    19Monitor

    WordPress Save as PDF plugin by Pdfcrowd plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 0%

    pdfcrowd · save as pdfJul 21, 2024

  • CVE-2024-37536
    21Monitor

    WordPress Easy Custom Code (LESS/CSS/JS) Plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    web357 · easy custom codeJul 21, 2024

  • CVE-2024-37523
    21Monitor

    WordPress Login Logo Editor plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    amplifyplugins · login logo editorJul 21, 2024

  • CVE-2024-38738
    23Monitor

    WordPress Change From Email plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    marian kadanka · change from emailJul 20, 2024

  • CVE-2024-38689
    23Monitor

    WordPress Simple Popup plugin <= 4.4 - Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    garrett grimm · simple popupJul 20, 2024

  • CVE-2024-35752
    19Monitor

    WordPress Stellissimo Text Box plugin 1.1.4 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 0%

    overclokk · stellissimo text boxJun 8, 2024

  • CVE-2024-35756
    19Monitor

    WordPress Tooltip CK plugin <= 2.2.15 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 0%

    ceikay · tooltip ckJun 8, 2024

  • CVE-2024-34797
    23Monitor

    WordPress Simple Popup Manager plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    benoit mercusot · simple popup managerJun 3, 2024

  • CVE-2024-34790
    23Monitor

    WordPress Download ImageMagick Sharpen Resized Images plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    hans van eijsden,niwreg · imagemagick sharpen resized imagesJun 3, 2024

  • CVE-2024-35640
    23Monitor

    WordPress Safety Exit plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    tomas cordero · safety exitJun 3, 2024

  • CVE-2024-35642
    23Monitor

    WordPress Site Favicon plugin <= 0.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    bryan hadaway · site faviconJun 3, 2024

  • CVE-2024-34426
    23Monitor

    WordPress Brozzme Scroll Top plugin <= 1.8.5 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    benoti · brozzme scroll topMay 14, 2024

  • CVE-2024-34423
    23Monitor

    WordPress Forty Four – 404 Plugin for WordPress plugin <= 1.4 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    phpbits · forty four – 404 plugin for wordpressMay 14, 2024

  • CVE-2024-33943
    23Monitor

    WordPress Ultimate Under Construction plugin <= 1.9.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    happykite · ultimate under constructionMay 3, 2024

  • CVE-2024-4433
    23Monitor

    WordPress Simple Image Popup plugin <= 2.4.0 - Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    mr digital · simple image popupMay 2, 2024

  • CVE-2024-32958
    28Monitor

    WordPress Slash Admin plugin <= 3.8.1 - CSRF to XSS vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    giorgos sarigiannidis · slash adminApr 24, 2024

  • CVE-2024-32591
    23Monitor

    WordPress Backend Designer plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    daniele de rosa · backend designerApr 18, 2024

  • CVE-2024-30545
    28Monitor

    WordPress Social Author Bio plugin <= 2.4 - Stored XSS via Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    nick powers · social author bioApr 15, 2024

  • CVE-2024-32428
    19Monitor

    WordPress MWW Disclaimer Buttons plugin <= 3.0.2 - Stored Cross Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 0%

    mosswebworks · mww disclaimer buttonsApr 15, 2024

  • CVE-2024-32083
    23Monitor

    WordPress Easy Logo plugin <= 1.9.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    varun kumar · easy logoApr 11, 2024

  • CVE-2024-31387
    23Monitor

    WordPress Popup Likebox plugin <= 3.7.2 - Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    popup likebox team · popup like boxApr 11, 2024

  • CVE-2024-31344
    23Monitor

    WordPress Easy Login Styler plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    phpbits creative studio · easy login styler – white label admin login page for wordpressApr 7, 2024