loris4py
Patchstack Bug Bounty Program
2 credited records · 2 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
17Monitor | CVE-2026-7559No exploit | Affilia <= 3.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Status Modificationredefiningtheweb · affiliate program & referral tracking for woocommerce & wordpress – affilia · CWE-862 | Medium4.3 | — | 0.5% | Jul 11, 2026 |
28Monitor | CVE-2026-39514No exploit | WordPress Paid Member Subscriptions plugin <= 2.17.3 - Reflected Cross Site Scripting (XSS) vulnerabilitycozmoslabs · paid member subscriptions · CWE-79 | High7.1 | — | 0.1% | Jun 15, 2026 |
- CVE-2026-755917Monitor
Affilia <= 3.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Status Modification
MediumCVSS 4.3No exploitEPSS 0%redefiningtheweb · affiliate program & referral tracking for woocommerce & wordpress – affiliaJul 11, 2026
- CVE-2026-3951428Monitor
WordPress Paid Member Subscriptions plugin <= 2.17.3 - Reflected Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%cozmoslabs · paid member subscriptionsJun 15, 2026