Skip to content
Noroxi

Deva Parekh

Patchstack Bug Bounty Program

15 credited records · 15 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Deva Parekh

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-116848
    26Monitor

    WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    posimyth innovations · the plus addons for elementor page builder liteOct 29, 2026

  • CVE-2026-118095
    26Monitor

    WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    david lingren · media library assistantOct 29, 2026

  • CVE-2026-118094
    26Monitor

    WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    igor funa · ad inserterOct 29, 2026

  • CVE-2026-115594
    26Monitor

    WordPress Media LIbrary Assistant plugin <= 3.42 - Sensitive Data Exposure vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    david lingren · media library assistantOct 26, 2026

  • CVE-2026-112241
    39Monitor

    WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    brainstorm force · surecartOct 22, 2026

  • CVE-2026-112221
    28Monitor

    WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    brainstorm force · surecartOct 21, 2026

  • CVE-2026-112840
    26Monitor

    WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    brainstorm force · surecartOct 20, 2026

  • CVE-2026-109700
    26Monitor

    WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.2 - Broken Access Control vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    elightup · meta box – wordpress custom fields frameworkOct 20, 2026

  • CVE-2026-112834
    21Monitor

    WordPress Seriously Simple Podcasting plugin <= 3.17.0 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    castos · seriously simple podcastingOct 20, 2026

  • CVE-2026-112833
    26Monitor

    WordPress Seriously Simple Podcasting plugin <= 3.17.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    castos · seriously simple podcastingOct 20, 2026

  • CVE-2026-18558
    25Monitor

    Embed Any Document <= 2.7.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'embeddoc' Shortcode

    MediumCVSS 6.4No exploitEPSS 0%

    awsmin · embed any document – embed pdf, word, powerpoint and excel filesOct 10, 2026

  • CVE-2026-105079
    26Monitor

    WordPress MasterStudy LMS plugin <= 3.7.52 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    stylemixthemes · masterstudy lmsOct 8, 2026

  • CVE-2026-105317
    34Monitor

    WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability

    HighCVSS 8.5No exploitEPSS 0%

    cozmoslabs · paid member subscriptionsOct 6, 2026

  • CVE-2026-94173
    21Monitor

    WordPress Business Directory plugin <= 6.4.27 - Insecure Direct Object References (IDOR) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    strategy11 team · business directorySep 30, 2026

  • CVE-2026-11801
    30Monitor

    WPAdverts <= 2.3.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via classifieds-types REST Endpoint

    HighCVSS 7.5Proof of conceptEPSS 1%

    gwin · wpadverts – classifieds pluginAug 18, 2026