Skip to content
Noroxi

darkestmode

10 credited records · 10 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for darkestmode

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-9280
    24Monitor

    Ad Inserter <= 2.8.15 - Reflected Cross-Site Scripting via URL Parameters in iframe Mode

    MediumCVSS 6.1No exploitEPSS 0%

    spacetime · ad inserter – ad manager & adsense adsJun 6, 2026

  • CVE-2026-9008
    17Monitor

    Page-list <= 6.2 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure via Shortcode Attributes

    MediumCVSS 4.3No exploitEPSS 0%

    webvitaly · page-listJun 5, 2026

  • CVE-2026-7621
    17Monitor

    SMTP2GO for WordPress <= 1.16.0 - Missing Authorization to Authenticated (Subscriber+) Log Read/Truncate

    MediumCVSS 4.3No exploitEPSS 0%

    smtp2go · smtp2go for wordpress – email made easyMay 28, 2026

  • CVE-2026-7615
    17Monitor

    Widget Context <= 1.3.3 - Cross-Site Request Forgery to Settings Update via 'wl' Parameter

    MediumCVSS 4.3No exploitEPSS 0%

    kasparsd · widget contextMay 22, 2026

  • CVE-2026-4658
    25Monitor

    Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes

    MediumCVSS 6.4No exploitEPSS 0%

    wpdevteam · gutenberg essential blocks – page builder for gutenberg blocks & patternsMay 2, 2026

  • CVE-2026-5234
    21Monitor

    LatePoint <= 5.3.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Financial Data Exposure via Sequential Invoice ID

    MediumCVSS 5.3No exploitEPSS 0%

    latepoint · latepoint – calendar booking plugin for appointments and eventsApr 17, 2026

  • CVE-2026-4065
    21Monitor

    Smart Slider 3 <= 3.5.1.33 - Missing Authorization to Authenticated (Contributor+) Slider Data Read and Image Record Manipulation

    MediumCVSS 5.4No exploitEPSS 0%

    nextendweb · smart slider 3Apr 7, 2026

  • CVE-2026-4056
    21Monitor

    User Registration & Membership <= 5.1.4 - Missing Authorization to Authenticated (Contributor+) Content Access Rule Manipulation

    MediumCVSS 5.4No exploitEPSS 0%

    wpeverest · user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderMar 23, 2026

  • CVE-2026-4066
    17Monitor

    Smart Custom Fields <= 5.0.6 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Relational Post Search

    MediumCVSS 4.3No exploitEPSS 0%

    inc2734 · smart custom fieldsMar 23, 2026

  • CVE-2026-4063
    17Monitor

    Social Icons Widget & Block <= 4.5.8 - Missing Authorization to Authenticated (Subscriber+) Sharing Configuration Creation

    MediumCVSS 4.3No exploitEPSS 0%

    wpzoom · social icons widget & block – social media icons & share buttonsMar 13, 2026