Skip to content
Noroxi

Lana Codes (Patchstack Alliance)

103 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Lana Codes (Patchstack Alliance)

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits every 10 minutes on paid plans, on the hour on the free plan.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • CVE alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools, at most 30 a day (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2023-34384
    35Monitor

    WordPress Kebo Twitter Feed Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    kebo twitter feed project · kebo twitter feedNov 12, 2023

  • CVE-2023-34378
    35Monitor

    WordPress WP Hide Post Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    scriptburn · wp hide postNov 12, 2023

  • CVE-2023-28694
    35Monitor

    WordPress Wbcom Designs – BuddyPress Activity Social Share Plugin <= 3.5.0 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    wbcomdesigns · buddypress activity social shareNov 12, 2023

  • CVE-2023-28495
    35Monitor

    WordPress WP Shortcode by MyThemeShop Plugin <= 1.4.16 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    mythemeshop · wp shortcodeNov 12, 2023

  • CVE-2023-32587
    35Monitor

    WordPress WP Reactions Lite Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    wpreactions · wp reactions liteNov 9, 2023

  • CVE-2023-32579
    35Monitor

    WordPress Forget About Shortcode Buttons Plugin <= 2.1.2 is vulnerable to Broken Access Control

    HighCVSS 8.8No exploitEPSS 0%

    designsandcode · forget about shortcode buttonsNov 9, 2023

  • CVE-2023-34386
    35Monitor

    WordPress WPC Smart Wishlist for WooCommerce Plugin <= 4.7.1 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    wpclever · wpc smart wishlist for woocommerceNov 9, 2023

  • CVE-2023-41732
    35Monitor

    WordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    dwbooster · cp blocksOct 6, 2023

  • CVE-2023-40202
    35Monitor

    WordPress WP HTML Mail Plugin <= 3.4.1 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    codemiq · wp html mailOct 3, 2023

  • CVE-2023-40201
    35Monitor

    WordPress Futurio Extra Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    futuriowp · futurio extraOct 3, 2023

  • CVE-2023-39923
    35Monitor

    WordPress The Post Grid Plugin <= 7.2.7 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    radiustheme · the post gridOct 3, 2023

  • CVE-2023-37891
    35Monitor

    WordPress Exit Popups & Onsite Retargeting by OptiMonk Plugin <= 2.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    optimonk · optimonk\Oct 3, 2023

  • CVE-2023-25981
    21Monitor

    WordPress BuddyForms Plugin <= 2.8.1 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    themekraft · post formAug 25, 2023

  • CVE-2023-23828
    21Monitor

    WordPress WP Category Post List Widget Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    swas · wp category post listAug 10, 2023

  • CVE-2023-23826
    21Monitor

    WordPress Add Posts to Pages Plugin <= 1.4.1 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    webmechanix · add posts to pagesAug 10, 2023

  • CVE-2023-23877
    21Monitor

    WordPress Pinterest RSS Widget Plugin <= 2.3.1 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    bkmacdaddy · pinterest rss widgetAug 8, 2023

  • CVE-2023-23829
    19Monitor

    WordPress Owl Carousel Plugin <= 0.5.3 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 0%

    pierre-jehan · owl carouselAug 8, 2023

  • CVE-2023-23833
    21Monitor

    WordPress Drop Shadow Boxes Plugin <= 1.7.10 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    drop shadow boxes project · drop shadow boxesJul 25, 2023

  • CVE-2022-34155
    35Monitor

    WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken Authentication

    HighCVSS 8.8Proof of conceptEPSS 0%

    miniorange · oauth single sign onJul 18, 2023

  • CVE-2023-37387
    35Monitor

    WordPress Classified Listing Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    radiustheme · classified listingJul 18, 2023

  • CVE-2023-37386
    35Monitor

    WordPress Media Library Helper by Codexin Plugin <= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    codexin · media library helperJul 18, 2023

  • CVE-2022-38062
    35Monitor

    WordPress Download Theme Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    metagauss · download themeJul 17, 2023

  • CVE-2022-36424
    35Monitor

    WordPress Easy Appointments Plugin <= 3.11.9 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    easy-appointments · easy appointmentsJul 17, 2023

  • CVE-2023-35096
    35Monitor

    WordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    wpexperts · mycredJul 17, 2023

  • CVE-2023-23719
    35Monitor

    WordPress Premmerce Plugin <= 1.3.17 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    premmerce · premmerceJul 17, 2023