Skip to content
Noroxi

Elieve

Patchstack Bug Bounty Program

9 credited records · 9 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Elieve

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits every 10 minutes on paid plans, on the hour on the free plan.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • CVE alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools, at most 30 a day (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-121770
    21Monitor

    WordPress VISeek plugin <= 1.0.5 - Cross Site Request Forgery (CSRF) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    villatheme · viseek2 days ago

  • CVE-2026-119097
    25Monitor

    Author Image <= 4.9.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter

    MediumCVSS 6.4No exploitEPSS 0%

    denis-de-bernardy · author image2 days ago

  • CVE-2026-121722
    30Monitor

    WordPress Formidable Forms Signature Online Contract Automation plugin <= 2.0.5 - Broken Access Control vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    wp e-signature · formidable forms signature online contract automation4 days ago

  • CVE-2026-120857
    21Monitor

    WordPress 2Way VideoCalls and Random Chat plugin <= 6.1.9 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    videowhisper.com · 2way videocalls and random chat6 days ago

  • CVE-2026-120364
    26Monitor

    WordPress Vidplex plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    untapwp · vidplex6 days ago

  • CVE-2026-119525
    17Monitor

    WordPress Dropshipping XML for WooCommerce plugin <= 1.7.4 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    wp desk · dropshipping xml for woocommerce6 days ago

  • CVE-2026-62055
    17Monitor

    WordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    liquid web / stellarwp · event ticketsOct 30, 2026

  • CVE-2026-111838
    28Monitor

    WordPress ThemeHunk Customizer plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    themehunk · themehunk customizerOct 21, 2026

  • CVE-2026-110252
    21Monitor

    WPeMatico RSS Feed Fetcher <= 2.9 - Unauthenticated Stored Cross-Site Scripting via RSS Feed Content Import

    MediumCVSS 5.4No exploitEPSS 0%

    etruel · wpematico rss feed fetcherOct 16, 2026