Skip to content
Noroxi

l8BL

Patchstack Bug Bounty Program

13 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for l8BL

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2025-53337
    21Monitor

    WordPress LifePress plugin <= 2.1.3 - Broken Access Control vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    ashan perera · lifepressAug 28, 2025

  • CVE-2025-22634
    21Monitor

    WordPress Easy Booked Plugin <= 2.4.5 - Cross Site Request Forgery (CSRF) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    md abu jubayer hossain · easy booked – appointment booking and scheduling management system for wordpressMar 27, 2025

  • CVE-2025-24643
    26Monitor

    WordPress WPGuppy plugin <= 1.1.0 - Broken Authentication vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    amentotech private limited · wpguppyFeb 3, 2025

  • CVE-2025-24650
    36Monitor

    WordPress Tourfic plugin <= 2.15.3 - Arbitrary File Upload vulnerability

    CriticalCVSS 9.1No exploitEPSS 0%

    themefic · tourficJan 24, 2025

  • CVE-2025-24611
    19Monitor

    WordPress Export All Posts, Products, Orders, Refunds & Users Plugin <= 2.9 - Arbitrary File Read vulnerability

    MediumCVSS 4.9No exploitEPSS 0%

    smackcoders inc., · wp ultimate exporterJan 24, 2025

  • CVE-2025-22723
    36Monitor

    WordPress Barcode Scanner and Inventory manager plugin <= 1.6.7 - Arbitrary File Upload vulnerability

    CriticalCVSS 9.1No exploitEPSS 0%

    dmitry v. (ceo of "ukr solution") · barcode scanner with inventory & order managerJan 21, 2025

  • CVE-2025-22761
    26Monitor

    WordPress Ajax Contact Form plugin <= 1.4.1 - Stored Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    olaf lederer · ajax contact formJan 15, 2025

  • CVE-2024-56280
    35Monitor

    WordPress WPGuppy plugin <= 1.1.0 - Privilege Escalation vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    amentotech private limited · wpguppyJan 7, 2025

  • CVE-2024-49222
    39Monitor

    WordPress WPGuppy plugin <= 1.1.0 - PHP Object Injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    amentotech private limited · wpguppyJan 7, 2025

  • CVE-2024-56250
    30Monitor

    WordPress Just Writing Statistics plugin <= 4.7 - SQL Injection vulnerability

    HighCVSS 7.6No exploitEPSS 0%

    greg ross · just writing statisticsJan 2, 2025

  • CVE-2024-56249
    36Monitor

    WordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Upload vulnerability

    CriticalCVSS 9.1Proof of conceptEPSS 1%

    ludwig you · wpmastertoolkitJan 2, 2025

  • CVE-2024-56248
    19Monitor

    WordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Download vulnerability

    MediumCVSS 4.9No exploitEPSS 0%

    ludwig you · wpmastertoolkitJan 2, 2025

  • CVE-2024-54442
    23Monitor

    WordPress Better WP Login Page plugin <= 1.1.2 - Stored Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    cortesfrau · better wp login pageDec 16, 2024