D01EXPLOIT OFFICIAL
10 credited records · 7 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
21Monitor | CVE-2025-15691No exploit | WPFunnels < 3.13.0 - Unauthenticated User Registration via Opt-in Formsunknown · wpfunnels · CWE-863 | Medium5.3 | — | 0.3% | Sep 4, 2026 |
34Monitor | CVE-2025-15662No exploit | Printcart Web to Print Product Designer for WooCommerce < 2.5.3 - Unauthenticated Arbitrary File Read and Server-Side Request Forgeryunknown · printcart web to print product designer for woocommerce · CWE-918 | High8.6 | — | 0.4% | Jul 27, 2026 |
21Monitor | CVE-2025-10268No exploit | Printcart Web to Print Product Designer for WooCommerce <= 2.4.8 - Unauthenticated Folder Content Disclosure via Path Traversalunknown · printcart web to print product designer for woocommerce · CWE-22 | Medium5.3 | — | 0.3% | Jun 26, 2026 |
17Monitor | CVE-2025-13408No exploit | Foxtool All-in-One: Contact chat button, Custom login, Media optimize images <= 2.5.2 - Cross-Site Request Forgery to Google OAuth Connectionfoxtheme · foxtool all-in-one: contact chat button, custom login, media optimize images · CWE-352 | Medium4.3 | — | 0.1% | Dec 12, 2025 |
39Monitor | CVE-2025-12158No exploit | Simple User Capabilities <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalationtanvirahmed1984 · simple user capabilities · CWE-862 | Critical9.8 | — | 0.4% | Nov 4, 2025 |
21Monitor | CVE-2025-12157No exploit | Simple User Capabilities <= 1.0 - Missing Authorization to Unauthenticated Capability Resettanvirahmed1984 · simple user capabilities · CWE-862 | Medium5.3 | — | 0.2% | Nov 4, 2025 |
21Monitor | CVE-2025-11881No exploit | AppPresser – Mobile App Framework <= 4.5.0 - Missing Authorization to Unauthenticated Limited Sensitive Information Exposurescottopolis · apppresser – mobile app framework · CWE-862 | Medium5.3 | — | 0.3% | Oct 30, 2025 |
21Monitor | CVE-2025-10486No exploit | Content Writer <= 3.6.8 - Unauthenticated Information Exposure via Log Filesteadycontent · content writer · CWE-532 | Medium5.3 | — | 0.3% | Oct 15, 2025 |
21Monitor | CVE-2025-10212No exploit | SiteAlert (Formerly WP Health) <= 1.9.8 - Missing Authorization to Unauthenticated Site Health Information Exposuresitealert · sitealert (formerly wp health) · CWE-862 | Medium5.3 | — | 0.3% | Oct 3, 2025 |
16Monitor | CVE-2025-10735No exploit | Block For Mailchimp – Easy Mailchimp Form Integration <= 1.1.12 - Unauthenticated Blind Server-Side Request Forgerybplugins · block for mailchimp – add email subscription forms and collect leads · CWE-918 | Medium4.0 | — | 0.3% | Oct 1, 2025 |
- CVE-2025-1569121Monitor
WPFunnels < 3.13.0 - Unauthenticated User Registration via Opt-in Forms
MediumCVSS 5.3No exploitEPSS 0%unknown · wpfunnelsSep 4, 2026
- CVE-2025-1566234Monitor
Printcart Web to Print Product Designer for WooCommerce < 2.5.3 - Unauthenticated Arbitrary File Read and Server-Side Request Forgery
HighCVSS 8.6No exploitEPSS 0%unknown · printcart web to print product designer for woocommerceJul 27, 2026
- CVE-2025-1026821Monitor
Printcart Web to Print Product Designer for WooCommerce <= 2.4.8 - Unauthenticated Folder Content Disclosure via Path Traversal
MediumCVSS 5.3No exploitEPSS 0%unknown · printcart web to print product designer for woocommerceJun 26, 2026
- CVE-2025-1340817Monitor
Foxtool All-in-One: Contact chat button, Custom login, Media optimize images <= 2.5.2 - Cross-Site Request Forgery to Google OAuth Connection
MediumCVSS 4.3No exploitEPSS 0%foxtheme · foxtool all-in-one: contact chat button, custom login, media optimize imagesDec 12, 2025
- CVE-2025-1215839Monitor
Simple User Capabilities <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
CriticalCVSS 9.8No exploitEPSS 0%tanvirahmed1984 · simple user capabilitiesNov 4, 2025
- CVE-2025-1215721Monitor
Simple User Capabilities <= 1.0 - Missing Authorization to Unauthenticated Capability Reset
MediumCVSS 5.3No exploitEPSS 0%tanvirahmed1984 · simple user capabilitiesNov 4, 2025
- CVE-2025-1188121Monitor
AppPresser – Mobile App Framework <= 4.5.0 - Missing Authorization to Unauthenticated Limited Sensitive Information Exposure
MediumCVSS 5.3No exploitEPSS 0%scottopolis · apppresser – mobile app frameworkOct 30, 2025
- CVE-2025-1048621Monitor
Content Writer <= 3.6.8 - Unauthenticated Information Exposure via Log File
MediumCVSS 5.3No exploitEPSS 0%steadycontent · content writerOct 15, 2025
- CVE-2025-1021221Monitor
SiteAlert (Formerly WP Health) <= 1.9.8 - Missing Authorization to Unauthenticated Site Health Information Exposure
MediumCVSS 5.3No exploitEPSS 0%sitealert · sitealert (formerly wp health)Oct 3, 2025
- CVE-2025-1073516Monitor
Block For Mailchimp – Easy Mailchimp Form Integration <= 1.1.12 - Unauthenticated Blind Server-Side Request Forgery
MediumCVSS 4.0No exploitEPSS 0%bplugins · block for mailchimp – add email subscription forms and collect leadsOct 1, 2025