hunter85
Patchstack Bug Bounty Program
12 credited records · 0 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
26Monitor | CVE-2025-32214No exploit | WordPress Hive Support plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerabilityhive support · hive support · CWE-79 | Medium6.5 | — | 0.2% | Apr 10, 2025 |
17Monitor | CVE-2025-31609No exploit | WordPress WPCargo Track & Trace plugin <= 8.0.2 - Insecure Direct Object References (IDOR) vulnerabilityarni cinco · wpcargo track & trace · CWE-862 | Medium4.3 | — | 0.2% | Mar 31, 2025 |
26Monitor | CVE-2025-22650No exploit | WordPress Smartarget.online Integration plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerabilityerez hadas-sonnenschein · smartarget · CWE-79 | Medium6.5 | — | 0.2% | Feb 18, 2025 |
21Monitor | CVE-2025-22757No exploit | WordPress CodeBard Help Desk plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerabilitycodebard · codebard help desk · CWE-79 | Medium5.4 | — | 0.2% | Jan 31, 2025 |
24Monitor | CVE-2025-22760No exploit | WordPress CodeBard Help Desk plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerabilitycodebard · codebard help desk · CWE-79 | Medium6.1 | — | 0.2% | Jan 15, 2025 |
21Monitor | CVE-2024-51651No exploit | WordPress CubeWP Forms plugin <= 1.1.10 - Broken Access Control vulnerabilityimran tauqeer · cubewp forms · CWE-862 | Medium5.3 | — | 0.3% | Jan 7, 2025 |
21Monitor | CVE-2024-56222No exploit | WordPress CodeBard Help Desk plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) vulnerabilitycodebard · codebard help desk · CWE-352 | Medium5.4 | — | 0.1% | Dec 31, 2024 |
17Monitor | CVE-2024-54321No exploit | WordPress Hive Support plugin <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerabilityhive support · hive support · CWE-352 | Medium4.3 | — | 0.2% | Dec 13, 2024 |
28Monitor | CVE-2024-54320No exploit | WordPress ICDSoft Reseller Store plugin<= 2.4.5 -Reflected Cross Site Scripting (XSS) vulnerabilityicdsoft · icdsoft reseller store · CWE-79 | High7.1 | — | 0.4% | Dec 13, 2024 |
28Monitor | CVE-2024-54274No exploit | WordPress Octrace Support plugin <= 1.2.7 - Reflected Cross Site Scripting (XSS) vulnerabilityoctrace · wordpress helpdesk & support ticket system plugin – octrace support · CWE-79 | High7.1 | — | 0.4% | Dec 13, 2024 |
39Monitor | CVE-2024-47311No exploit | WordPress Wheel of Life plugin <= 1.1.8 - Broken Access Control vulnerabilitykraftplugins · wheel of life · CWE-862 | Critical9.8 | — | 0.3% | Nov 1, 2024 |
28Monitor | CVE-2024-47300No exploit | WordPress CubeWP Forms plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerabilityimran tauqeer · cubewp forms · CWE-79 | High7.1 | — | 0.2% | Oct 6, 2024 |
- CVE-2025-3221426Monitor
WordPress Hive Support plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%hive support · hive supportApr 10, 2025
- CVE-2025-3160917Monitor
WordPress WPCargo Track & Trace plugin <= 8.0.2 - Insecure Direct Object References (IDOR) vulnerability
MediumCVSS 4.3No exploitEPSS 0%arni cinco · wpcargo track & traceMar 31, 2025
- CVE-2025-2265026Monitor
WordPress Smartarget.online Integration plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%erez hadas-sonnenschein · smartargetFeb 18, 2025
- CVE-2025-2275721Monitor
WordPress CodeBard Help Desk plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%codebard · codebard help deskJan 31, 2025
- CVE-2025-2276024Monitor
WordPress CodeBard Help Desk plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.1No exploitEPSS 0%codebard · codebard help deskJan 15, 2025
- CVE-2024-5165121Monitor
WordPress CubeWP Forms plugin <= 1.1.10 - Broken Access Control vulnerability
MediumCVSS 5.3No exploitEPSS 0%imran tauqeer · cubewp formsJan 7, 2025
- CVE-2024-5622221Monitor
WordPress CodeBard Help Desk plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) vulnerability
MediumCVSS 5.4No exploitEPSS 0%codebard · codebard help deskDec 31, 2024
- CVE-2024-5432117Monitor
WordPress Hive Support plugin <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability
MediumCVSS 4.3No exploitEPSS 0%hive support · hive supportDec 13, 2024
- CVE-2024-5432028Monitor
WordPress ICDSoft Reseller Store plugin<= 2.4.5 -Reflected Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%icdsoft · icdsoft reseller storeDec 13, 2024
- CVE-2024-5427428Monitor
WordPress Octrace Support plugin <= 1.2.7 - Reflected Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%octrace · wordpress helpdesk & support ticket system plugin – octrace supportDec 13, 2024
- CVE-2024-4731139Monitor
WordPress Wheel of Life plugin <= 1.1.8 - Broken Access Control vulnerability
CriticalCVSS 9.8No exploitEPSS 0%kraftplugins · wheel of lifeNov 1, 2024
- CVE-2024-4730028Monitor
WordPress CubeWP Forms plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%imran tauqeer · cubewp formsOct 6, 2024