Skip to content
Noroxi

endy

Patchstack Bug Bounty Program

16 credited records · 16 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for endy

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-62031
    37Monitor

    WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability

    CriticalCVSS 9.3No exploitEPSS 0%

    stylemix · ulistingOct 10, 2026

  • CVE-2026-84753
    39Monitor

    WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    wpfunnels · mail mintSep 3, 2026

  • CVE-2026-57385
    34Monitor

    WordPress Vitepos plugin <= 3.4.2 - SQL Injection vulnerability

    HighCVSS 8.5No exploitEPSS 0%

    appsbd · viteposJul 13, 2026

  • CVE-2026-57331
    39Monitor

    WordPress Paid Videochat Turnkey Site plugin <= 7.4.8 - Arbitrary File Deletion vulnerability

    CriticalCVSS 9.9No exploitEPSS 0%

    videowhisper · paid videochat turnkey siteJun 29, 2026

  • CVE-2026-57330
    26Monitor

    WordPress MasterStudy LMS plugin <= 3.7.27 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    stylemix · masterstudy lmsJun 29, 2026

  • CVE-2026-57647
    30Monitor

    WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.6.1 - Local File Inclusion vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    bplugins · panorama viewer – 360 degree image + video viewerJun 26, 2026

  • CVE-2026-54822
    34Monitor

    WordPress SALESmanago & Leadoo plugin <= 3.11.2 - SQL Injection vulnerability

    HighCVSS 8.5No exploitEPSS 0%

    salesmanago · salesmanago & leadooJun 25, 2026

  • CVE-2026-54812
    37Monitor

    WordPress Motors plugin <= 1.4.109 - SQL Injection vulnerability

    CriticalCVSS 9.3No exploitEPSS 0%

    stylemixthemes · motorsJun 17, 2026

  • CVE-2026-54814
    32Monitor

    WordPress Motors plugin <= 1.4.109 - Local File Inclusion vulnerability

    HighCVSS 8.1No exploitEPSS 0%

    stylemixthemes · motorsJun 17, 2026

  • CVE-2026-48867
    28Monitor

    WordPress Quiz And Survey Master plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    expresstech · quiz and survey masterJun 15, 2026

  • CVE-2026-42662
    26Monitor

    WordPress Event Tickets plugin <= 5.27.5 - Bypass Vulnerability vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    liquid web / stellarwp · event ticketsJun 15, 2026

  • CVE-2026-42658
    28Monitor

    WordPress Classified Listing plugin <= 5.3.8 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    mamunur rashid · classified listingJun 15, 2026

  • CVE-2026-42657
    21Monitor

    WordPress Contest Gallery plugin <= 28.1.7 - Other Vulnerability Type vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    wasiliy strecker · contest galleryJun 15, 2026

  • CVE-2026-42656
    26Monitor

    WordPress Contest Gallery plugin <= 28.1.6 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    wasiliy strecker · contest galleryJun 15, 2026

  • CVE-2026-49766
    39Monitor

    WordPress WP User Manager plugin <= 2.9.16 - Arbitrary File Deletion vulnerability

    CriticalCVSS 9.9No exploitEPSS 0%

    wp user manager · wp user managerJun 15, 2026

  • CVE-2026-42727
    37Monitor

    WordPress Active Products Tables for WooCommerce plugin <= 1.0.8 - SQL Injection vulnerability

    CriticalCVSS 9.3No exploitEPSS 0%

    realmag777 · active products tables for woocommerceMay 27, 2026