Skip to content
Noroxi

dc11

50 credited records · 1 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for dc11

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-13690
    29Monitor

    UsersWP < 1.2.67 - Two-Factor Authentication Bypass

    HighCVSS 7.4No exploitEPSS 0%

    unknown · userswpJul 29, 2026

  • CVE-2023-0479
    24Monitor

    Print Invoice & Delivery Notes for WooCommerce < 4.7.2 - Reflected XSS

    MediumCVSS 6.1No exploitEPSS 0%

    tychesoftwares · print invoice \& delivery notes for woocommerceJan 16, 2024

  • CVE-2023-0224
    40Plan

    GiveWP < 2.24.1 - Unauthenticated SQLi

    CriticalCVSS 9.8No exploitEPSS 3%

    givewp · givewpJan 16, 2024

  • CVE-2021-24559
    21Monitor

    Qyrr < 0.7 - Authenticated (contributor+) Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    patrickposner · qyrrJan 16, 2024

  • CVE-2021-24432
    24Monitor

    Advanced AJAX Product Filters < 1.5.4.7 - Unauthenticated Reflected Cross-Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    berocket · advanced ajax product filtersJan 16, 2024

  • CVE-2023-5674
    38Monitor

    WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs/send_mail endpoint

    HighCVSS 8.8No exploitEPSS 10%

    wpvibes · wp mail logDec 26, 2023

  • CVE-2023-5673
    35Monitor

    WP Mail Log < 1.1.3 – Contributor+ Arbitrary File Upload to RCE

    HighCVSS 8.8No exploitEPSS 1%

    wpvibes · wp mail logDec 26, 2023

  • CVE-2023-5672
    26Monitor

    WP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpoint

    MediumCVSS 6.5No exploitEPSS 0%

    wpvibes · wp mail logDec 26, 2023

  • CVE-2023-5645
    35Monitor

    WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs endpoint

    HighCVSS 8.8No exploitEPSS 0%

    wpvibes · wp mail logDec 26, 2023

  • CVE-2023-5644
    30Monitor

    WP Mail Log < 1.1.3 – Incorrect Authorization in REST API Endpoints

    HighCVSS 7.6No exploitEPSS 0%

    wpvibes · wp mail logDec 26, 2023

  • CVE-2023-5325
    24Monitor

    Woocommerce Vietnam Checkout < 2.0.6 - Unauthenticated Stored XSS

    MediumCVSS 6.1No exploitEPSS 0%

    levantoan · woocommerce vietnam checkoutNov 27, 2023

  • CVE-2023-4823
    21Monitor

    WP Meta and Date Remover < 2.2.0 - Subscriber+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    prasadkirpekar · wp meta and date removerOct 31, 2023

  • CVE-2023-4666
    40Plan

    Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    10web · form makerOct 16, 2023

  • CVE-2023-2805
    28Monitor

    SupportCandy < 3.1.7 - Admin+ SQLi

    HighCVSS 7.2No exploitEPSS 0%

    supportcandy · supportcandyJun 19, 2023

  • CVE-2023-2719
    35Monitor

    SupportCandy < 3.1.7 - Subscriber+ SQLi

    HighCVSS 8.8No exploitEPSS 1%

    supportcandy · supportcandyJun 19, 2023

  • CVE-2023-1730
    51Plan

    SupportCandy < 3.1.5 - Unauthenticated SQLi

    CriticalCVSS 9.8Proof of conceptEPSS 40%

    supportcandy · supportcandyMay 2, 2023

  • CVE-2023-0889
    26Monitor

    TF Random Numbers < 2.0.1 - Subscriber+ Arbitrary Option Update

    MediumCVSS 6.5No exploitEPSS 0%

    metagauss · themeflection numbersApr 17, 2023

  • CVE-2023-0765
    35Monitor

    Gallery by BestWebSoft < 4.7.0 - Author+ SQL Injection

    HighCVSS 8.8No exploitEPSS 0%

    bestwebsoft · galleryApr 17, 2023

  • CVE-2023-0764
    21Monitor

    Gallery by BestWebSoft < 4.7.0 - Author+ Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    bestwebsoft · galleryApr 17, 2023

  • CVE-2023-0820
    35Monitor

    User Role by BestWebSoft < 1.6.7 - Privilege Escalation via CSRF

    HighCVSS 8.8No exploitEPSS 0%

    bestwebsoft · user roleApr 3, 2023

  • CVE-2023-0441
    32Monitor

    Gallery Blocks with Lightbox < 3.0.8 - Subscriber+ Arbitrary Options Update

    HighCVSS 8.1No exploitEPSS 0%

    simplygallery · simply gallery blocks with lightboxMar 27, 2023

  • CVE-2023-0940
    35Monitor

    ProfileGrid < 5.3.1 - Subscriber+ Arbitrary Password Reset

    HighCVSS 8.8No exploitEPSS 0%

    metagauss · profilegridMar 20, 2023

  • CVE-2023-0876
    24Monitor

    WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect

    MediumCVSS 6.1Proof of conceptEPSS 0%

    joomunited · wp meta seoMar 20, 2023

  • CVE-2023-0875
    35Monitor

    WP Meta SEO < 4.5.3 - Subscriber+ SQLi

    HighCVSS 8.8No exploitEPSS 0%

    joomunited · wp meta seoMar 20, 2023

  • CVE-2023-0477
    35Monitor

    Auto Featured Image < 3.9.16 - Author+ Arbitrary File Upload

    HighCVSS 8.8No exploitEPSS 1%

    cm-wp · auto featured imageMar 13, 2023