Kyle Sanchez (Patchstack Alliance)
21 credited records · 0 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2024-30512No exploit | WordPress weForms plugin <= 1.6.20 - Broken Access Control vulnerabilityweformspro · weforms · CWE-862 | Critical9.1 | — | 0.3% | Jun 9, 2024 |
21Monitor | CVE-2023-51544No exploit | WordPress RegistrationMagic plugin <= 5.2.5.0 - Form Submission Limit Bypass vulnerabilitymetagauss · registrationmagic · CWE-799 | Medium5.3 | — | 0.3% | Jun 4, 2024 |
35Monitor | CVE-2024-32774No exploit | WordPress ProfileGrid plugin <= 5.8.2 - Group Members Limit Bypass vulnerabilitymetagauss · profilegrid · CWE-307 | High8.8 | — | 0.4% | May 17, 2024 |
21Monitor | CVE-2024-32685No exploit | WordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerabilitywpmet · wp ultimate review · CWE-602 | Medium5.3 | — | 0.3% | May 17, 2024 |
21Monitor | CVE-2024-32512No exploit | WordPress weForms plugin <= 1.6.20 - Form Submission Restriction Bypass vulnerabilityweforms · weforms · CWE-602 | Medium5.3 | — | 0.3% | May 17, 2024 |
21Monitor | CVE-2024-30540No exploit | WordPress VS Contact Form plugin <= 14.7 - Sum Captcha Bypass vulnerabilityguido · vs contact form · CWE-804 | Medium5.3 | — | 0.4% | May 17, 2024 |
21Monitor | CVE-2024-24874No exploit | WordPress Polls CP plugin <= 1.0.71 - Content Injection vulnerabilitycodepeople · cp polls · CWE-80 | Medium5.3 | — | 0.4% | May 17, 2024 |
21Monitor | CVE-2024-24873No exploit | WordPress Polls CP plugin <= 1.0.71 - Polls Limitation Bypass vulnerabilitycodepeople · cp polls · CWE-799 | Medium5.3 | — | 0.4% | May 17, 2024 |
17Monitor | CVE-2024-34389No exploit | WordPress WP Post Author plugin <= 3.6.4 - Broken Access Control vulnerabilityafthemes · wp post author · CWE-862 | Medium4.3 | — | 0.3% | May 6, 2024 |
17Monitor | CVE-2024-34387No exploit | WordPress WP Post Author plugin <= 3.6.4 - Rating Value Manipulation vulnerabilityafthemes · wp post author · CWE-862 | Medium4.3 | — | 0.3% | May 6, 2024 |
21Monitor | CVE-2024-32823No exploit | WordPress Rate My Post plugin <= 3.4.4 - Insecure Direct Object References (IDOR) vulnerabilityblazzdev · rate my post · CWE-639 | Medium5.3 | — | 0.4% | Apr 24, 2024 |
35Monitor | CVE-2024-32808No exploit | WordPress ProfileGrid plugin <= 5.7.9 - Insecure Direct Object Reference (IDOR) vulnerabilitymetagauss · profilegrid · CWE-639 | High8.8 | — | 0.4% | Apr 24, 2024 |
35Monitor | CVE-2024-32772No exploit | WordPress ProfileGrid plugin <= 5.7.9 - Insecure Direct Object References (IDOR) vulnerabilitymetagauss · profilegrid · CWE-639 | High8.8 | — | 0.4% | Apr 24, 2024 |
30Monitor | CVE-2024-32684No exploit | WordPress WP Ultimate Review plugin <= 2.2.5 - Broken Access Control on Review vulnerabilitywpmet · wp ultimate review · CWE-862 | High7.5 | — | 0.3% | Apr 22, 2024 |
30Monitor | CVE-2024-32683No exploit | WordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerabilitywpmet · wp ultimate review · CWE-639 | High7.5 | — | 0.4% | Apr 19, 2024 |
17Monitor | CVE-2024-32604No exploit | WordPress WP-Recall plugin <= 16.26.5 - Insecure Direct Object References (IDOR) vulnerabilityplechev andrey · wp-recall · CWE-639 | Medium4.3 | — | 0.3% | Apr 18, 2024 |
28Monitor | CVE-2024-31291No exploit | WordPress ProfileGrid plugin <= 5.7.6 - IDOR on Friend Request vulnerabilitymetagauss · profilegrid · CWE-639 | High7.1 | — | 0.3% | Apr 7, 2024 |
21Monitor | CVE-2024-31095No exploit | WordPress Thumbs Rating plugin <= 5.1.0 - Insecure Direct Object References (IDOR) vulnerabilityricard torres · thumbs rating · CWE-639 | Medium5.3 | — | 0.4% | Mar 31, 2024 |
24Monitor | CVE-2023-51540No exploit | WordPress Custom 404 Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)kunalnagar · custom 404 pro · CWE-79 | Medium6.1 | — | 0.3% | Feb 1, 2024 |
30Monitor | CVE-2023-49812No exploit | WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Insecure Direct Object References (IDOR)wppa · wp photo album plus · CWE-639 | High7.5 | — | 0.5% | Dec 19, 2023 |
24Monitor | CVE-2023-49813No exploit | WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Cross Site Scripting (XSS)wppa · wp photo album plus · CWE-79 | Medium6.1 | — | 0.3% | Dec 14, 2023 |
- CVE-2024-3051236Monitor
WordPress weForms plugin <= 1.6.20 - Broken Access Control vulnerability
CriticalCVSS 9.1No exploitEPSS 0%weformspro · weformsJun 9, 2024
- CVE-2023-5154421Monitor
WordPress RegistrationMagic plugin <= 5.2.5.0 - Form Submission Limit Bypass vulnerability
MediumCVSS 5.3No exploitEPSS 0%metagauss · registrationmagicJun 4, 2024
- CVE-2024-3277435Monitor
WordPress ProfileGrid plugin <= 5.8.2 - Group Members Limit Bypass vulnerability
HighCVSS 8.8No exploitEPSS 0%metagauss · profilegridMay 17, 2024
- CVE-2024-3268521Monitor
WordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerability
MediumCVSS 5.3No exploitEPSS 0%wpmet · wp ultimate reviewMay 17, 2024
- CVE-2024-3251221Monitor
WordPress weForms plugin <= 1.6.20 - Form Submission Restriction Bypass vulnerability
MediumCVSS 5.3No exploitEPSS 0%weforms · weformsMay 17, 2024
- CVE-2024-3054021Monitor
WordPress VS Contact Form plugin <= 14.7 - Sum Captcha Bypass vulnerability
MediumCVSS 5.3No exploitEPSS 0%guido · vs contact formMay 17, 2024
- CVE-2024-2487421Monitor
WordPress Polls CP plugin <= 1.0.71 - Content Injection vulnerability
MediumCVSS 5.3No exploitEPSS 0%codepeople · cp pollsMay 17, 2024
- CVE-2024-2487321Monitor
WordPress Polls CP plugin <= 1.0.71 - Polls Limitation Bypass vulnerability
MediumCVSS 5.3No exploitEPSS 0%codepeople · cp pollsMay 17, 2024
- CVE-2024-3438917Monitor
WordPress WP Post Author plugin <= 3.6.4 - Broken Access Control vulnerability
MediumCVSS 4.3No exploitEPSS 0%afthemes · wp post authorMay 6, 2024
- CVE-2024-3438717Monitor
WordPress WP Post Author plugin <= 3.6.4 - Rating Value Manipulation vulnerability
MediumCVSS 4.3No exploitEPSS 0%afthemes · wp post authorMay 6, 2024
- CVE-2024-3282321Monitor
WordPress Rate My Post plugin <= 3.4.4 - Insecure Direct Object References (IDOR) vulnerability
MediumCVSS 5.3No exploitEPSS 0%blazzdev · rate my postApr 24, 2024
- CVE-2024-3280835Monitor
WordPress ProfileGrid plugin <= 5.7.9 - Insecure Direct Object Reference (IDOR) vulnerability
HighCVSS 8.8No exploitEPSS 0%metagauss · profilegridApr 24, 2024
- CVE-2024-3277235Monitor
WordPress ProfileGrid plugin <= 5.7.9 - Insecure Direct Object References (IDOR) vulnerability
HighCVSS 8.8No exploitEPSS 0%metagauss · profilegridApr 24, 2024
- CVE-2024-3268430Monitor
WordPress WP Ultimate Review plugin <= 2.2.5 - Broken Access Control on Review vulnerability
HighCVSS 7.5No exploitEPSS 0%wpmet · wp ultimate reviewApr 22, 2024
- CVE-2024-3268330Monitor
WordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability
HighCVSS 7.5No exploitEPSS 0%wpmet · wp ultimate reviewApr 19, 2024
- CVE-2024-3260417Monitor
WordPress WP-Recall plugin <= 16.26.5 - Insecure Direct Object References (IDOR) vulnerability
MediumCVSS 4.3No exploitEPSS 0%plechev andrey · wp-recallApr 18, 2024
- CVE-2024-3129128Monitor
WordPress ProfileGrid plugin <= 5.7.6 - IDOR on Friend Request vulnerability
HighCVSS 7.1No exploitEPSS 0%metagauss · profilegridApr 7, 2024
- CVE-2024-3109521Monitor
WordPress Thumbs Rating plugin <= 5.1.0 - Insecure Direct Object References (IDOR) vulnerability
MediumCVSS 5.3No exploitEPSS 0%ricard torres · thumbs ratingMar 31, 2024
- CVE-2023-5154024Monitor
WordPress Custom 404 Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%kunalnagar · custom 404 proFeb 1, 2024
- CVE-2023-4981230Monitor
WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Insecure Direct Object References (IDOR)
HighCVSS 7.5No exploitEPSS 0%wppa · wp photo album plusDec 19, 2023
- CVE-2023-4981324Monitor
WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%wppa · wp photo album plusDec 14, 2023