Intrudify
Patchstack Bug Bounty Program
61 credited records · 61 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
26Monitor | CVE-2026-61987No exploit | WordPress WCFM – Frontend Manager for WooCommerce plugin <= 6.8.1 - Cross Site Scripting (XSS) vulnerabilitywc lovers · wcfm – frontend manager for woocommerce · CWE-79 | Medium6.5 | — | 0.1% | 2 days ago |
26Monitor | CVE-2026-114185No exploit | WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilitywpvibes · anywhere elementor · CWE-79 | Medium6.5 | — | 0.2% | Nov 3, 2026 |
28Monitor | CVE-2026-94175No exploit | WordPress All In One Login plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerabilitysaad iqbal · all in one login · CWE-79 | High7.1 | — | 0.1% | Oct 30, 2026 |
26Monitor | CVE-2026-118097No exploit | WordPress Flash & HTML5 Video plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerabilitybplugins · flash & html5 video · CWE-79 | Medium6.5 | — | 0.1% | Oct 29, 2026 |
28Monitor | CVE-2026-115592No exploit | WordPress OceanWP theme <= 4.2.7 - Cross Site Scripting (XSS) vulnerabilityoceanwp · oceanwp · CWE-79 | High7.1 | — | 0.1% | Oct 29, 2026 |
26Monitor | CVE-2026-112865No exploit | WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerabilitywproyal · royal elementor addons · CWE-79 | Medium6.5 | — | 0.1% | Oct 26, 2026 |
26Monitor | CVE-2026-114705No exploit | WordPress WP Social Feed Gallery plugin <= 5.0.13 - Broken Access Control vulnerabilityquadlayers · wp social feed gallery · CWE-862 | Medium6.5 | — | 0.2% | Oct 24, 2026 |
30Monitor | CVE-2026-111851No exploit | WordPress Royal Elementor Addons plugin <= 1.7.1068 - Arbitrary Code Execution vulnerabilitywproyal · royal elementor addons · CWE-470 | High7.6 | — | 0.2% | Oct 22, 2026 |
26Monitor | CVE-2026-114184No exploit | WordPress Elementor Addon Elements plugin <= 1.14.4 - Cross Site Scripting (XSS) vulnerabilitywpvibes · elementor addon elements · CWE-79 | Medium6.5 | — | 0.1% | Oct 22, 2026 |
26Monitor | CVE-2026-112867No exploit | WordPress H5P plugin <= 1.17.9 - Cross Site Scripting (XSS) vulnerabilityh5p · h5p · CWE-79 | Medium6.5 | — | 0.1% | Oct 22, 2026 |
26Monitor | CVE-2026-112199No exploit | WordPress YITH WooCommerce Wishlist plugin <= 4.18.1 - Cross Site Scripting (XSS) vulnerabilityyith · yith woocommerce wishlist · CWE-79 | Medium6.5 | — | 0.1% | Oct 19, 2026 |
26Monitor | CVE-2026-110365No exploit | WordPress Advanced File Manager plugin <= 5.4.14 - Broken Access Control vulnerabilitywpexperts · advanced file manager · CWE-862 | Medium6.5 | — | 0.3% | Oct 18, 2026 |
26Monitor | CVE-2026-106604No exploit | WordPress YITH WooCommerce Compare plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerabilityyith · yith woocommerce compare · CWE-79 | Medium6.5 | — | 0.1% | Oct 15, 2026 |
30Monitor | CVE-2026-107431No exploit | WordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerabilitycrocoblock · jetformbuilder · CWE-862 | High7.5 | — | 0.3% | Oct 14, 2026 |
21Monitor | CVE-2026-61994No exploit | WordPress WP-Members plugin <= 3.5.7 - Broken Access Control vulnerabilityrocketgeek · wp-members · CWE-862 | Medium5.4 | — | 0.1% | Oct 12, 2026 |
28Monitor | CVE-2026-42702No exploit | WordPress Tutor LMS plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerabilitythemeum · tutor lms · CWE-79 | High7.1 | — | 0.1% | Oct 10, 2026 |
26Monitor | CVE-2026-105890No exploit | WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerabilityliquid web / stellarwp · gutenberg blocks by kadence blocks · CWE-79 | Medium6.5 | — | 0.1% | Oct 8, 2026 |
26Monitor | CVE-2026-105886No exploit | WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerabilitybdthemes · ultimate post kit · CWE-862 | Medium6.5 | — | 0.2% | Oct 8, 2026 |
26Monitor | CVE-2026-105078No exploit | WordPress WP Store Locator plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerabilitywp store locator · wp store locator · CWE-79 | Medium6.5 | — | 0.1% | Oct 8, 2026 |
26Monitor | CVE-2026-103070No exploit | WordPress ShortPixel Image Optimizer plugin <= 6.5.6 - Cross Site Scripting (XSS) vulnerabilityshortpixel · shortpixel image optimizer · CWE-79 | Medium6.5 | — | 0.1% | Oct 8, 2026 |
26Monitor | CVE-2026-105884No exploit | WordPress Rocket Lazy Load plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerabilitywp media · rocket lazy load · CWE-79 | Medium6.5 | — | 0.1% | Oct 7, 2026 |
26Monitor | CVE-2026-105875No exploit | WordPress Prime Slider – Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerabilitybdthemes · prime slider – addons for elementor · CWE-79 | Medium6.5 | — | 0.1% | Oct 7, 2026 |
26Monitor | CVE-2026-105873No exploit | WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerabilitybdthemes · element pack elementor addons · CWE-79 | Medium6.5 | — | 0.1% | Oct 7, 2026 |
26Monitor | CVE-2026-104393No exploit | WordPress Happy Addons for Elementor plugin <= 3.50.0 - Cross Site Scripting (XSS) vulnerabilitywedevs · happy addons for elementor · CWE-79 | Medium6.5 | — | 0.1% | Oct 7, 2026 |
26Monitor | CVE-2026-104391No exploit | WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerabilityexpresstech · quiz and survey master · CWE-79 | Medium6.5 | — | 0.1% | Oct 7, 2026 |
- CVE-2026-6198726Monitor
WordPress WCFM – Frontend Manager for WooCommerce plugin <= 6.8.1 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%wc lovers · wcfm – frontend manager for woocommerce2 days ago
- CVE-2026-11418526Monitor
WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%wpvibes · anywhere elementorNov 3, 2026
- CVE-2026-9417528Monitor
WordPress All In One Login plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%saad iqbal · all in one loginOct 30, 2026
- CVE-2026-11809726Monitor
WordPress Flash & HTML5 Video plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%bplugins · flash & html5 videoOct 29, 2026
- CVE-2026-11559228Monitor
WordPress OceanWP theme <= 4.2.7 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%oceanwp · oceanwpOct 29, 2026
- CVE-2026-11286526Monitor
WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%wproyal · royal elementor addonsOct 26, 2026
- CVE-2026-11470526Monitor
WordPress WP Social Feed Gallery plugin <= 5.0.13 - Broken Access Control vulnerability
MediumCVSS 6.5No exploitEPSS 0%quadlayers · wp social feed galleryOct 24, 2026
- CVE-2026-11185130Monitor
WordPress Royal Elementor Addons plugin <= 1.7.1068 - Arbitrary Code Execution vulnerability
HighCVSS 7.6No exploitEPSS 0%wproyal · royal elementor addonsOct 22, 2026
- CVE-2026-11418426Monitor
WordPress Elementor Addon Elements plugin <= 1.14.4 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%wpvibes · elementor addon elementsOct 22, 2026
- CVE-2026-11286726Monitor
WordPress H5P plugin <= 1.17.9 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%h5p · h5pOct 22, 2026
- CVE-2026-11219926Monitor
WordPress YITH WooCommerce Wishlist plugin <= 4.18.1 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%yith · yith woocommerce wishlistOct 19, 2026
- CVE-2026-11036526Monitor
WordPress Advanced File Manager plugin <= 5.4.14 - Broken Access Control vulnerability
MediumCVSS 6.5No exploitEPSS 0%wpexperts · advanced file managerOct 18, 2026
- CVE-2026-10660426Monitor
WordPress YITH WooCommerce Compare plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%yith · yith woocommerce compareOct 15, 2026
- CVE-2026-10743130Monitor
WordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerability
HighCVSS 7.5No exploitEPSS 0%crocoblock · jetformbuilderOct 14, 2026
- CVE-2026-6199421Monitor
WordPress WP-Members plugin <= 3.5.7 - Broken Access Control vulnerability
MediumCVSS 5.4No exploitEPSS 0%rocketgeek · wp-membersOct 12, 2026
- CVE-2026-4270228Monitor
WordPress Tutor LMS plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%themeum · tutor lmsOct 10, 2026
- CVE-2026-10589026Monitor
WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%liquid web / stellarwp · gutenberg blocks by kadence blocksOct 8, 2026
- CVE-2026-10588626Monitor
WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability
MediumCVSS 6.5No exploitEPSS 0%bdthemes · ultimate post kitOct 8, 2026
- CVE-2026-10507826Monitor
WordPress WP Store Locator plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%wp store locator · wp store locatorOct 8, 2026
- CVE-2026-10307026Monitor
WordPress ShortPixel Image Optimizer plugin <= 6.5.6 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%shortpixel · shortpixel image optimizerOct 8, 2026
- CVE-2026-10588426Monitor
WordPress Rocket Lazy Load plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%wp media · rocket lazy loadOct 7, 2026
- CVE-2026-10587526Monitor
WordPress Prime Slider – Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%bdthemes · prime slider – addons for elementorOct 7, 2026
- CVE-2026-10587326Monitor
WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%bdthemes · element pack elementor addonsOct 7, 2026
- CVE-2026-10439326Monitor
WordPress Happy Addons for Elementor plugin <= 3.50.0 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%wedevs · happy addons for elementorOct 7, 2026
- CVE-2026-10439126Monitor
WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%expresstech · quiz and survey masterOct 7, 2026