Skip to content
Noroxi

HLog

Patchstack Bug Bounty Program

13 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for HLog

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2025-28993
    34Monitor

    WordPress Content No Cache plugin <= 0.1.4 - Arbitrary Function Call vulnerability

    HighCVSS 8.6No exploitEPSS 0%

    jose mortellaro · content no cacheJun 27, 2025

  • CVE-2025-25173
    28Monitor

    WordPress FastBook plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    fasterthemes · fastbookJun 27, 2025

  • CVE-2025-23973
    28Monitor

    WordPress SpecFit-Virtual Try On Woocommerce plugin <= 8.0.3 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    dugudlabs · specfit-virtual try on woocommerceJun 27, 2025

  • CVE-2025-23974
    32Monitor

    WordPress One-Login plugin <= 1.4 - Privilege Escalation Vulnerability

    HighCVSS 8.1No exploitEPSS 0%

    ifkooo · one-loginJun 9, 2025

  • CVE-2025-30932
    21Monitor

    WordPress WP Compress for MainWP plugin <= 6.30.32 - Broken Access Control Vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    wp compress · wp compress for mainwpJun 6, 2025

  • CVE-2025-30927
    17Monitor

    WordPress Wordapp plugin <= 1.7.0 - Broken Access Control Vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    wordapp team · wordappJun 6, 2025

  • CVE-2025-29006
    21Monitor

    WordPress Direct Checkout for WooCommerce Lite plugin <= 1.0.3 - Broken Access Control Vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    centangle · direct checkout for woocommerce liteJun 6, 2025

  • CVE-2025-28996
    17Monitor

    WordPress GPP Slideshow plugin <= 1.3.5 - Broken Access Control Vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    thad allender · gpp slideshowJun 6, 2025

  • CVE-2025-26593
    17Monitor

    WordPress FastBook plugin <= 1.1 - Cross Site Request Forgery (CSRF) Vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    fasterthemes · fastbookJun 6, 2025

  • CVE-2025-23971
    21Monitor

    WordPress KI Live Video Conferences plugin <= 5.5.15 - Broken Access Control Vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    whassan · ki live video conferencesJun 6, 2025

  • CVE-2025-23969
    21Monitor

    WordPress KI Live Video Conferences plugin <= 5.5.15 - Sensitive Data Exposure Vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    whassan · ki live video conferencesJun 6, 2025

  • CVE-2025-48275
    26Monitor

    WordPress Visual Header plugin <= 1.3 - Broken Access Control Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    dastan800 · visual headerMay 23, 2025

  • CVE-2025-47548
    39Monitor

    WordPress Wbcom Designs - Activity Link Preview For BuddyPress plugin <= 1.4.4 - Server Side Request Forgery (SSRF) Vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    wbcomdesigns · activity link preview for buddypressMay 7, 2025