Skip to content
Noroxi

LionTree

11 credited records · 5 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for LionTree

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-120209
    37Monitor

    AJ-Report through 1.7.1 Authentication Bypass leading to RCE via Share-Token

    CriticalCVSS 9.3Proof of conceptEPSS 0%

    anji-plus · aj-reportOct 31, 2026

  • CVE-2026-120203
    34Monitor

    ShowDoc 2.8.14 before 3.9.6 Code Injection via Mock Templates

    HighCVSS 8.7No exploitEPSS 0%

    showdoc · showdocOct 31, 2026

  • CVE-2025-12473
    24Monitor

    RTMKit <= 1.6.8 - Reflected Cross-Site Scripting via 'themebuilder' Parameter

    MediumCVSS 6.1No exploitEPSS 0%

    rometheme · rtmkitMar 10, 2026

  • CVE-2025-12002
    23Monitor

    Feeds for YouTube Pro <= 2.6.0 - Unauthenticated Arbitrary File Read via Path Traversal

    MediumCVSS 5.9No exploitEPSS 0%

    awesome motive · youtube feed proJan 16, 2026

  • CVE-2025-14800
    32Monitor

    Redirection for Contact Form 7 <= 3.2.7 - Unauthenticated Arbitrary File Copy via move_file_to_upload

    HighCVSS 8.1No exploitEPSS 0%

    themeisle · redirection for contact form 7Dec 21, 2025

  • CVE-2025-12471
    24Monitor

    Hubbub Lite <= 1.36.0 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    nerdpressteam · hubbub lite – fast, free social sharing and follow buttonsNov 6, 2025

  • CVE-2025-12560
    17Monitor

    Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_url

    MediumCVSS 4.3No exploitEPSS 0%

    pr-gateway · blog2social: social media auto post & schedulerNov 6, 2025

  • CVE-2025-12497
    32Monitor

    Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args[extra_template_path]

    HighCVSS 8.1No exploitEPSS 0%

    averta · premium portfolio features for phlox themeNov 5, 2025

  • CVE-2025-11735
    30Monitor

    HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` Parameter

    HighCVSS 7.5No exploitEPSS 0%

    realmag777 · husky – products filter professional for woocommerceOct 28, 2025

  • CVE-2025-11536
    20Monitor

    Element Pack Addons for Elementor <= 8.2.5 - Authenticated (Subscriber+) Blind Server-Side Request Forgery

    MediumCVSS 5.0No exploitEPSS 0%

    bdthemes · element pack – widgets, templates & addons for elementorOct 20, 2025

  • CVE-2025-8877
    30Monitor

    AffiliateWP <= 2.28.2 - Unauthenticated SQL Injection

    HighCVSS 7.5No exploitEPSS 0%

    affiliatewp · affiliatewpSep 30, 2025