Skip to content
Noroxi

Hakiduck

Patchstack Bug Bounty Program

27 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Hakiduck

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2025-32137
    19Monitor

    WordPress s2Member plugin <= 250419 - Local File Inclusion vulnerability

    MediumCVSS 4.9No exploitEPSS 0%

    cristián lávaque · s2memberApr 4, 2025

  • CVE-2025-22665
    17Monitor

    WordPress RapidLoad plugin <= 2.4.4 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    shakeeb sadikeen · rapidloadMar 27, 2025

  • CVE-2025-26988
    30Monitor

    WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.7.8 - SQL Injection vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    cozyvision · sms alert order notificationsMar 3, 2025

  • CVE-2025-26984
    24Monitor

    WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.7.8 - Reflected Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    cozyvision · sms alert order notificationsMar 3, 2025

  • CVE-2025-22349
    30Monitor

    WordPress WordPress Auction Plugin plugin <= 3.7 - SQL Injection vulnerability

    HighCVSS 7.6No exploitEPSS 0%

    wp marka · wordpress auction pluginJan 7, 2025

  • CVE-2024-54207
    23Monitor

    WordPress WordPress Auction Plugin plugin <= 3.7 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    wp marka · wordpress auction pluginDec 6, 2024

  • CVE-2024-51815
    36Monitor

    WordPress s2Member plugin <= 241114 - Remote Code Execution (RCE) vulnerability

    CriticalCVSS 9.0No exploitEPSS 0%

    cristián lávaque · s2memberDec 6, 2024

  • CVE-2024-51615
    37Monitor

    WordPress WordPress Auction Plugin plugin <= 3.7 - SQL Injection vulnerability

    CriticalCVSS 9.3No exploitEPSS 0%

    wp marka · wordpress auction pluginDec 6, 2024

  • CVE-2024-53788
    23Monitor

    WordPress WordPress Portfolio Builder – Portfolio Gallery plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    portfoliohub · wordpress portfolio builder – portfolio galleryNov 30, 2024

  • CVE-2024-53783
    30Monitor

    WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - SQL Injection vulnerability

    HighCVSS 7.6No exploitEPSS 0%

    anzar ahmed · ni woocommerce cost of goodsNov 30, 2024

  • CVE-2024-52436
    28Monitor

    WordPress Post SMTP plugin <= 2.9.9 - SQL Injection vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    wpexperts · post smtpNov 18, 2024

  • CVE-2024-52434
    36Monitor

    WordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerability

    CriticalCVSS 9.1No exploitEPSS 1%

    supsystic · popupNov 18, 2024

  • CVE-2024-52427
    35Monitor

    WordPress Event Tickets with Ticket Scanner plugin <= 2.3.11 - Remote Code Execution (RCE) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    vollstart · event tickets with ticket scannerNov 18, 2024

  • CVE-2024-52393
    28Monitor

    WordPress Podlove Podcast Publisher plugin <= 4.1.15 - Admin+ Remote Code Execution (RCE) vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    podlove · podlove podcast publisherNov 14, 2024

  • CVE-2024-50409
    21Monitor

    WordPress Namaste! LMS plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    kibokolabs · namaste\! lmsOct 29, 2024

  • CVE-2024-50407
    24Monitor

    WordPress Namaste! LMS plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    kibokolabs · namaste\! lmsOct 29, 2024

  • CVE-2024-49691
    30Monitor

    WordPress Product Filter by WBW plugin <= 2.7.0 - SQL Injection vulnerability

    HighCVSS 7.6No exploitEPSS 0%

    wbw plugins · product filter by wbwOct 24, 2024

  • CVE-2024-49684
    28Monitor

    WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - PHP Object Injection vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    revmakx · backup and staging by wp time capsuleOct 23, 2024

  • CVE-2024-49244
    34Monitor

    WordPress SV Product Import Export for WooCommerce plugin <= 1.0.0 - SQL Injection vulnerability

    HighCVSS 8.5No exploitEPSS 0%

    vrinsoft · csv product import export for woocommerceOct 17, 2024

  • CVE-2024-47312
    34Monitor

    WordPress Classic Editor and Classic Widgets plugin <= 1.4.1 - SQL Injection vulnerability

    HighCVSS 8.5No exploitEPSS 0%

    wp grim · classic editor and classic widgetsOct 17, 2024

  • CVE-2024-49271
    28Monitor

    WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.121 - Remote Code Execution (RCE) vulnerability

    HighCVSS 7.2No exploitEPSS 1%

    unlimited-elements · unlimited elements for elementorOct 16, 2024

  • CVE-2024-48042
    36Monitor

    WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability

    CriticalCVSS 9.1No exploitEPSS 1%

    supsystic · contact form by supsysticOct 16, 2024

  • CVE-2024-48020
    34Monitor

    WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - SQL Injection vulnerability

    HighCVSS 8.5No exploitEPSS 0%

    revmakx · backup and staging by wp time capsuleOct 11, 2024

  • CVE-2024-47331
    39Monitor

    WordPress Multi Step for Contact Form plugin <= 2.7.7 - Unauthenticated SQL Injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    ninjateam · multi step for contact form 7Oct 11, 2024

  • CVE-2024-47350
    37Monitor

    WordPress YITH WooCommerce Ajax Search plugin <= 2.8.0 - SQL Injection vulnerability

    CriticalCVSS 9.3No exploitEPSS 0%

    yithemes · yith woocommerce ajax searchOct 6, 2024