Skip to content
Noroxi

FearZzZz (Patchstack Alliance)

39 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for FearZzZz (Patchstack Alliance)

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2023-49753
    30Monitor

    WordPress Adifier System plugin < 3.1.4 - Local File Inclusion vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    spoonthemes · adifier systemMay 17, 2024

  • CVE-2023-25790
    21Monitor

    WordPress WoodMart theme <= 7.0.4 - Unauth Arbitrary Shortcodes Injection

    MediumCVSS 5.3No exploitEPSS 0%

    xtemos · woodmartApr 24, 2024

  • CVE-2023-41864
    17Monitor

    WordPress PeproDev CF7 Database plugin <= 1.8.0 - Cross Site Request Forgery (CSRF) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    pepro dev. group · peprodev cf7 databaseApr 18, 2024

  • CVE-2022-47151
    34Monitor

    WordPress JS Help Desk plugin <= 2.7.1 - Unauth. SQL Injection Vulnerability

    HighCVSS 8.6No exploitEPSS 0%

    joomsky · js help deskApr 17, 2024

  • CVE-2024-31422
    17Monitor

    WordPress Favicon by RealFaviconGenerator plugin <= 1.3.29 - Cross Site Request Forgery (CSRF) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    philippe bernard · faviconApr 15, 2024

  • CVE-2024-31932
    35Monitor

    WordPress Blocksy Companion plugin <= 2.0.28 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    creativethemes · blocksy companionApr 11, 2024

  • CVE-2022-47153
    24Monitor

    WordPress Jobeleon theme <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    wpjobboard · jobeleonMar 29, 2024

  • CVE-2023-49838
    17Monitor

    Cross-Site Request Forgery (CSRF) vulnerability in multiple themes by KlbTheme

    MediumCVSS 4.3No exploitEPSS 0%

    klbtheme · clotya themeMar 26, 2024

  • CVE-2023-49839
    28Monitor

    Reflected Cross-Site Scripting vulnerability in multiple WordPress components by KlbTheme

    HighCVSS 7.1No exploitEPSS 0%

    klbtheme · cosmetsy theme (core plugin)Mar 26, 2024

  • CVE-2024-29103
    28Monitor

    WordPress Database for Contact Form 7 plugin <= 3.0.6 - Unauthenticated Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    ninjateam · database for contact form 7Mar 19, 2024

  • CVE-2024-29102
    24Monitor

    WordPress Extensions For CF7 plugin <= 3.0.6 - Unauthenticated Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    hasthemes · extensions for cf7Mar 19, 2024

  • CVE-2022-46839
    39Monitor

    WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Arbitrary File Upload

    CriticalCVSS 9.8No exploitEPSS 0%

    wiselyhub · js help deskJan 5, 2024

  • CVE-2023-50902
    35Monitor

    WordPress New User Approve Plugin <= 2.5.1 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    wpexperts · new user approveDec 29, 2023

  • CVE-2023-49752
    39Monitor

    WordPress Adifier System Plugin < 3.1.4 is vulnerable to SQL Injection

    CriticalCVSS 9.8No exploitEPSS 0%

    spoonthemes · adifierDec 20, 2023

  • CVE-2023-49750
    39Monitor

    WordPress Couponis Demo Plugin < 2.2 is vulnerable to SQL Injection

    CriticalCVSS 9.8No exploitEPSS 0%

    spoonthemes · couponisDec 19, 2023

  • CVE-2023-48769
    35Monitor

    WordPress Chat Bubble Plugin <= 2.3 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    bluecoral · chat bubbleDec 18, 2023

  • CVE-2023-49187
    24Monitor

    WordPress Adifier System Plugin < 3.1.4 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    spoonthemes · adifierDec 15, 2023

  • CVE-2023-49766
    24Monitor

    WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    themefic · ultimate addons for contact form 7Dec 14, 2023

  • CVE-2023-48328
    35Monitor

    WordPress NextGEN Gallery Plugin <= 3.37 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    imagely · nextgen galleryNov 30, 2023

  • CVE-2023-47775
    35Monitor

    WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    gvectors · wpdiscuzNov 22, 2023

  • CVE-2023-32500
    35Monitor

    WordPress WoodMart Theme <= 7.1.1 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    xtemos · woodmartNov 9, 2023

  • CVE-2023-28499
    21Monitor

    WordPress Slide Anything Plugin <= 2.4.9 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    simonpedge · slide anything-responsive content\/html slider and carouselNov 7, 2023

  • CVE-2023-47185
    24Monitor

    WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    gvectors · wpdiscuzNov 6, 2023

  • CVE-2023-45071
    24Monitor

    WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    10web · form makerOct 18, 2023

  • CVE-2023-45070
    24Monitor

    WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    10web · form makerOct 18, 2023