Skip to content
Noroxi

emad (Patchstack Alliance)

56 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers
  • CVE-2024-39639
    14Monitor

    WordPress File Upload plugin <= 4.24.7 - Broken Access Control + CSRF vulnerability

    LowCVSS 3.5No exploitEPSS 0%

    iptanus · wordpress file uploadNov 1, 2024

  • CVE-2024-23504
    21Monitor

    WordPress Ninja Tables plugin <= 5.0.5 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    wpmanageninja · ninja tablesJun 14, 2024

  • CVE-2023-51524
    35Monitor

    WordPress weForms plugin <= 1.6.18 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    weformspro · weformsJun 12, 2024

  • CVE-2023-52117
    25Monitor

    WordPress ProfileGrid plugin <= 5.6.6 - Broken Access Control vulnerability

    MediumCVSS 6.3No exploitEPSS 0%

    metagauss · profilegridJun 12, 2024

  • CVE-2024-32144
    17Monitor

    WordPress Welcart e-Commerce plugin <= 2.9.14 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    welcart · welcart e-commerceJun 11, 2024

  • CVE-2024-23503
    17Monitor

    WordPress Ninja Tables plugin <= 5.0.6 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    wpmanageninja · ninja tablesJun 11, 2024

  • CVE-2024-22296
    35Monitor

    WordPress 12 Step Meeting List plugin <= 3.14.28 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    code4recovery · 12 step meeting listJun 10, 2024

  • CVE-2024-31252
    35Monitor

    WordPress Responsive Lightbox & Gallery plugin <= 2.4.6 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    dfactory · responsive lightbox \& galleryJun 9, 2024

  • CVE-2024-31248
    35Monitor

    WordPress All-in-One Video Gallery plugin <= 3.5.2 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    plugins360 · all-in-one video galleryJun 9, 2024

  • CVE-2024-22151
    21Monitor

    WordPress Import and export users and customers plugin <= 1.24.6 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    codection · import and export users and customersJun 8, 2024

  • CVE-2024-34798
    21Monitor

    WordPress Debug Log – Manger Tool plugin <= 1.4.5 - Sensitive Data Exposure vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    lukman nakib · debug log – manger toolJun 3, 2024

  • CVE-2024-33627
    17Monitor

    WordPress AGCA – Custom Dashboard & Login Page plugin <= 7.2.2 - Server Side Request Forgery (SSRF) vulnerability

    MediumCVSS 4.4No exploitEPSS 0%

    cusmin · absolutely glamorous custom adminApr 29, 2024

  • CVE-2024-33642
    23Monitor

    WordPress Advanced Post List plugin <= 0.5.6.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    ekojr · advanced post listApr 26, 2024

  • CVE-2024-32722
    23Monitor

    WordPress Coupon & Discount Code Reveal Button plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    Apr 24, 2024

  • CVE-2024-32686
    21Monitor

    WordPress Backup Migration plugin <= 1.4.3 - Sensitive Data Exposure via Log vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    inisev · backup migrationApr 18, 2024

  • CVE-2024-32598
    21Monitor

    WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    ba-booking · ba book everythingApr 18, 2024

  • CVE-2024-31926
    23Monitor

    WordPress Advanced Cron Manager – debug & control plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    bracketspace · advanced cron manager – debug & controlApr 11, 2024

  • CVE-2024-29807
    21Monitor

    WordPress DearFlip plugin <= 2.2.26 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    dearhive · dearflipMar 27, 2024

  • CVE-2024-22149
    28Monitor

    WordPress cformsII plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    oliver seidel, bastian germann · cformsiiMar 27, 2024

  • CVE-2024-24701
    35Monitor

    WordPress Setka Editor Plugin <= 2.1.20 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    tiny · setka workflowFeb 28, 2024

  • CVE-2024-24702
    35Monitor

    WordPress Page Restrict Plugin <= 2.5.5 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    sivel · page restrictFeb 28, 2024

  • CVE-2023-51370
    19Monitor

    WordPress WP Chat App Plugin <= 3.4.4 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 0%

    ninjateam · wp chat appFeb 12, 2024

  • CVE-2023-51685
    19Monitor

    WordPress WP Review Slider Plugin <= 12.7 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 0%

    ljapps · wp review sliderFeb 1, 2024

  • CVE-2023-52203
    19Monitor

    WordPress CformsII Plugin <= 15.0.5 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 0%

    cformsii project · cformsiiJan 8, 2024

  • CVE-2023-51378
    35Monitor

    WordPress Rise Blocks Plugin <= 3.1 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    eaglevisionit · rise blocksDec 29, 2023