Skip to content
Noroxi

Khalid (Patchstack Alliance)

48 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers
  • CVE-2024-43150
    21Monitor

    WordPress Xpro Elementor Addons plugin <= 1.4.4.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    wpxpro · xpro addons for elementorAug 12, 2024

  • CVE-2024-43124
    26Monitor

    WordPress Graphina plugin <= 1.8.10 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    iqonic design · graphinaAug 12, 2024

  • CVE-2024-43123
    26Monitor

    WordPress Card Elements for Elementor plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    techeshta · card elements for elementorAug 12, 2024

  • CVE-2024-43210
    26Monitor

    WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.9.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    la-studio · la-studio element kit for elementorAug 12, 2024

  • CVE-2024-43151
    21Monitor

    WordPress Ultimate Addons for Beaver Builder – Lite plugin <= 1.5.9 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    brainstormforce · ultimate addons for beaver builderAug 12, 2024

  • CVE-2024-39668
    21Monitor

    WordPress Extensions for Elementor plugin <= 2.0.31 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    idioweb · extensions for elementorAug 1, 2024

  • CVE-2024-37244
    21Monitor

    WordPress Ninja Beaver Add-ons for Beaver Builder plugin <= 2.4.5 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    ninjabeaveraddon · ninja beaver add-ons for beaver builderJul 22, 2024

  • CVE-2024-37229
    21Monitor

    WordPress Blogmentor – Blog Layouts for Elementor plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    auburnforest · blogmentorJul 22, 2024

  • CVE-2024-37101
    21Monitor

    WordPress WP Post Author plugin <= 3.6.7 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    afthemes · wp post authorJul 22, 2024

  • CVE-2024-38720
    26Monitor

    WordPress EazyDocs plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    spider-themes · eazydocsJul 20, 2024

  • CVE-2024-38718
    26Monitor

    WordPress Download Button for Elementor plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    clicklabs® medienagentur · download button for elementorJul 20, 2024

  • CVE-2024-37419
    35Monitor

    WordPress Cowidgets – Elementor Addons plugin <= 1.1.1 - Local File Inclusion vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    codeless · cowidgetsJul 9, 2024

  • CVE-2024-37546
    21Monitor

    WordPress Image Hover Effects for Elementor with Lightbox and Flipbox plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    oxilab · image hover effects for elementor with lightbox and flipboxJul 6, 2024

  • CVE-2024-35660
    39Monitor

    WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Broken Access Control on API vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    master-addons · master addonsJun 9, 2024

  • CVE-2024-30539
    39Monitor

    WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    getawesomesupport · awesome supportJun 9, 2024

  • CVE-2024-35688
    21Monitor

    WordPress Master Addons for Elementor plugin <= 2.0.5.9 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    master-addons · master addonsJun 8, 2024

  • CVE-2024-35713
    21Monitor

    WordPress Testimonial Carousel For Elementor plugin <= 10.1.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    uapp · testimonial carousel for elementorJun 8, 2024

  • CVE-2024-35782
    21Monitor

    WordPress Cowidgets – Elementor Addons plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    codeless · cowidgets - elementorJun 4, 2024

  • CVE-2024-35666
    21Monitor

    WordPress Themesflat Addons For Elementor plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    themesflat · themesflat addons for elementorJun 4, 2024

  • CVE-2023-46630
    30Monitor

    WordPress Admin and Site Enhancements (ASE) plugin <= 5.7.1 - Password Protected View Bypass Vulnerability vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    wpase · admin and site enhancements (ase)Jun 4, 2024

  • CVE-2024-34445
    21Monitor

    WordPress SKT Addons for Elementor plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    sktthemes · skt addons for elementorMay 14, 2024

  • CVE-2024-34547
    21Monitor

    WordPress Magical Addons For Elementor plugin <= 1.1.34 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    wpthemespace · magical addons for elementorMay 8, 2024

  • CVE-2024-34563
    26Monitor

    WordPress Gold Addons for Elementor plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    goldaddons · gold addons for elementorMay 8, 2024

  • CVE-2024-34562
    21Monitor

    WordPress Move Addons for Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    moveaddons · move addons for elementorMay 8, 2024

  • CVE-2024-34572
    26Monitor

    WordPress Fancy Elementor Flipbox plugin <= 2.4.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    themeprix · fancy elementor flipboxMay 8, 2024