iohex
28 credited records · 0 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
21Monitor | CVE-2022-4115No exploit | Editorial Calendar < 3.8.3 - Contributor+ Stored XSSeditorial calendar project · editorial calendar · CWE-79 | Medium5.4 | — | 0.4% | Jun 27, 2023 |
19Monitor | CVE-2022-4330No exploit | WP Attachments < 5.0.6 - Admin+ Stored XSSmarcomilesi · wp attachments · CWE-79 | Medium4.8 | — | 0.5% | Jan 16, 2023 |
19Monitor | CVE-2022-4199No exploit | Link Library < 7.4.1 - Admin+ Stored XSSylefebvre · link library · CWE-79 | Medium4.8 | — | 0.5% | Jan 16, 2023 |
19Monitor | CVE-2022-4260Proof of concept | WP-Ban < 1.69.1 - Admin+ Stored XSSwp-ban project · wp-ban · CWE-79 | Medium4.8 | — | 0.9% | Jan 2, 2023 |
19Monitor | CVE-2022-4256No exploit | All-in-One Addons for Elementor - WidgetKit < 2.4.4 - Admin+ Stored XSSthemesgrove · all-in-one addons for elementor · CWE-79 | Medium4.8 | — | 0.5% | Jan 2, 2023 |
19Monitor | CVE-2022-4200No exploit | Login with Cognito <= 1.4.8 - Admin+ Stored XSSminiorange · login with cognito · CWE-79 | Medium4.8 | — | 0.5% | Jan 2, 2023 |
19Monitor | CVE-2022-4142No exploit | WordPress Filter Gallery Plugin < 0.1.6 - Admin+ Stored XSSwordpress filter gallery project · wordpress filter gallery · CWE-79 | Medium4.8 | — | 0.5% | Jan 2, 2023 |
19Monitor | CVE-2022-4119No exploit | Image Optimizer, Resizer and CDN < 6.8.1 - Admin+ Stored XSSsirv · image optimizer\, resizer and cdn · CWE-79 | Medium4.8 | — | 0.5% | Jan 2, 2023 |
19Monitor | CVE-2022-4243No exploit | ImageInject <= 1.17 - Admin+ Stored XSSwpscoop · imageinject · CWE-79 | Medium4.8 | — | 0.5% | Dec 26, 2022 |
19Monitor | CVE-2022-4242No exploit | WP Google Review Slider < 11.6 - Admin+ Stored XSSljapps · wp google review slider · CWE-79 | Medium4.8 | — | 0.5% | Dec 26, 2022 |
19Monitor | CVE-2022-4110No exploit | Eventify <= 2.1 - Admin+ Stored XSSeventify project · eventify · CWE-79 | Medium4.8 | — | 0.5% | Dec 26, 2022 |
19Monitor | CVE-2022-4042No exploit | Paytium < 4.3.7 - Admin+ Stored XSSpaytium · paytium · CWE-79 | Medium4.8 | — | 0.5% | Dec 26, 2022 |
24Monitor | CVE-2022-25849No exploit | Cross-site Scripting (XSS)hyperdown project · hyperdown · CWE-79 | Medium6.1 | — | 0.5% | Oct 26, 2022 |
19Monitor | CVE-2022-2384No exploit | Digital Publications by Supsystic < 1.7.4 - Admin+ Stored Cross-Site Scriptingsupsystic · digital publications by supsystic · CWE-79 | Medium4.8 | — | 0.6% | Aug 15, 2022 |
19Monitor | CVE-2022-2194No exploit | Accept Stripe Payments < 2.0.64 - Admin+ Stored Cross-Site Scriptingtipsandtricks-hq · accept stripe · CWE-79 | Medium4.8 | — | 0.6% | Jul 17, 2022 |
19Monitor | CVE-2022-2114No exploit | Data Tables Generator by Supsystic < 1.10.20 - Admin+ Stored Cross-Site Scriptingsupsystic · data tables generator · CWE-79 | Medium4.8 | — | 0.6% | Jul 17, 2022 |
19Monitor | CVE-2022-2050No exploit | WP Paginate < 2.1.9 - Admin+ Stored Cross-Site Scriptingmaxfoundry · wp-paginate · CWE-79 | Medium4.8 | — | 0.6% | Jul 11, 2022 |
24Monitor | CVE-2021-24578No exploit | SportsPress < 2.7.9 - Reflected Cross-Site Scriptingthemeboy · sportspress · CWE-79 | Medium6.1 | — | 0.8% | Dec 21, 2021 |
24Monitor | CVE-2021-24560No exploit | Software License Manager < 4.4.8 - Reflected Cross-Site Scriptingtipsandtricks-hq · software license manager · CWE-79 | Medium6.1 | — | 0.7% | Sep 13, 2021 |
25Monitor | CVE-2021-24510Proof of concept | MF Gig Calendar < 1.2 - Reflected Cross-Site Scripting (XSS)mf gig calendar project · mf gig calendar · CWE-79 | Medium6.1 | — | 2.7% | Sep 13, 2021 |
25Monitor | CVE-2021-24435Proof of concept | Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)gambit · titan framework · CWE-79 | Medium6.1 | — | 1.7% | Sep 6, 2021 |
21Monitor | CVE-2021-24512No exploit | Video Posts Webcam Recorder < 3.2.4 - Authenticated Reflected XSSvideowhisper · video posts webcam recorder · CWE-79 | Medium5.4 | — | 0.6% | Aug 16, 2021 |
25Monitor | CVE-2021-24498Proof of concept | Calendar Event Multi View < 1.4.01 - Unauthenticated Reflected Cross-Site Scripting (XSS)dwbooster · calendar event multi view · CWE-79 | Medium6.1 | — | 3.5% | Aug 2, 2021 |
24Monitor | CVE-2021-24496No exploit | Community Event < 1.4.8 - Reflected Cross-Site Scripting (XSS)community events project · community events · CWE-79 | Medium6.1 | — | 0.8% | Aug 2, 2021 |
21Monitor | CVE-2021-24283No exploit | Accordion < 2.2.30 - Authenticated Reflected Cross-Site Scripting (XSS)pickplugins · accordion · CWE-79 | Medium5.4 | — | 0.6% | May 14, 2021 |
- CVE-2022-411521Monitor
Editorial Calendar < 3.8.3 - Contributor+ Stored XSS
MediumCVSS 5.4No exploitEPSS 0%editorial calendar project · editorial calendarJun 27, 2023
- CVE-2022-433019Monitor
WP Attachments < 5.0.6 - Admin+ Stored XSS
MediumCVSS 4.8No exploitEPSS 0%marcomilesi · wp attachmentsJan 16, 2023
- CVE-2022-419919Monitor
Link Library < 7.4.1 - Admin+ Stored XSS
MediumCVSS 4.8No exploitEPSS 0%ylefebvre · link libraryJan 16, 2023
- CVE-2022-426019Monitor
WP-Ban < 1.69.1 - Admin+ Stored XSS
MediumCVSS 4.8Proof of conceptEPSS 1%wp-ban project · wp-banJan 2, 2023
- CVE-2022-425619Monitor
All-in-One Addons for Elementor - WidgetKit < 2.4.4 - Admin+ Stored XSS
MediumCVSS 4.8No exploitEPSS 0%themesgrove · all-in-one addons for elementorJan 2, 2023
- CVE-2022-420019Monitor
Login with Cognito <= 1.4.8 - Admin+ Stored XSS
MediumCVSS 4.8No exploitEPSS 1%miniorange · login with cognitoJan 2, 2023
- CVE-2022-414219Monitor
WordPress Filter Gallery Plugin < 0.1.6 - Admin+ Stored XSS
MediumCVSS 4.8No exploitEPSS 0%wordpress filter gallery project · wordpress filter galleryJan 2, 2023
- CVE-2022-411919Monitor
Image Optimizer, Resizer and CDN < 6.8.1 - Admin+ Stored XSS
MediumCVSS 4.8No exploitEPSS 0%sirv · image optimizer\, resizer and cdnJan 2, 2023
- CVE-2022-424319Monitor
ImageInject <= 1.17 - Admin+ Stored XSS
MediumCVSS 4.8No exploitEPSS 1%wpscoop · imageinjectDec 26, 2022
- CVE-2022-424219Monitor
WP Google Review Slider < 11.6 - Admin+ Stored XSS
MediumCVSS 4.8No exploitEPSS 1%ljapps · wp google review sliderDec 26, 2022
- CVE-2022-411019Monitor
Eventify <= 2.1 - Admin+ Stored XSS
MediumCVSS 4.8No exploitEPSS 1%eventify project · eventifyDec 26, 2022
- CVE-2022-404219Monitor
Paytium < 4.3.7 - Admin+ Stored XSS
MediumCVSS 4.8No exploitEPSS 0%paytium · paytiumDec 26, 2022
- CVE-2022-2584924Monitor
Cross-site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%hyperdown project · hyperdownOct 26, 2022
- CVE-2022-238419Monitor
Digital Publications by Supsystic < 1.7.4 - Admin+ Stored Cross-Site Scripting
MediumCVSS 4.8No exploitEPSS 1%supsystic · digital publications by supsysticAug 15, 2022
- CVE-2022-219419Monitor
Accept Stripe Payments < 2.0.64 - Admin+ Stored Cross-Site Scripting
MediumCVSS 4.8No exploitEPSS 1%tipsandtricks-hq · accept stripeJul 17, 2022
- CVE-2022-211419Monitor
Data Tables Generator by Supsystic < 1.10.20 - Admin+ Stored Cross-Site Scripting
MediumCVSS 4.8No exploitEPSS 1%supsystic · data tables generatorJul 17, 2022
- CVE-2022-205019Monitor
WP Paginate < 2.1.9 - Admin+ Stored Cross-Site Scripting
MediumCVSS 4.8No exploitEPSS 1%maxfoundry · wp-paginateJul 11, 2022
- CVE-2021-2457824Monitor
SportsPress < 2.7.9 - Reflected Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 1%themeboy · sportspressDec 21, 2021
- CVE-2021-2456024Monitor
Software License Manager < 4.4.8 - Reflected Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 1%tipsandtricks-hq · software license managerSep 13, 2021
- CVE-2021-2451025Monitor
MF Gig Calendar < 1.2 - Reflected Cross-Site Scripting (XSS)
MediumCVSS 6.1Proof of conceptEPSS 3%mf gig calendar project · mf gig calendarSep 13, 2021
- CVE-2021-2443525Monitor
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
MediumCVSS 6.1Proof of conceptEPSS 2%gambit · titan frameworkSep 6, 2021
- CVE-2021-2451221Monitor
Video Posts Webcam Recorder < 3.2.4 - Authenticated Reflected XSS
MediumCVSS 5.4No exploitEPSS 1%videowhisper · video posts webcam recorderAug 16, 2021
- CVE-2021-2449825Monitor
Calendar Event Multi View < 1.4.01 - Unauthenticated Reflected Cross-Site Scripting (XSS)
MediumCVSS 6.1Proof of conceptEPSS 4%dwbooster · calendar event multi viewAug 2, 2021
- CVE-2021-2449624Monitor
Community Event < 1.4.8 - Reflected Cross-Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 1%community events project · community eventsAug 2, 2021
- CVE-2021-2428321Monitor
Accordion < 2.2.30 - Authenticated Reflected Cross-Site Scripting (XSS)
MediumCVSS 5.4No exploitEPSS 1%pickplugins · accordionMay 14, 2021