Skip to content
Noroxi

luc

Patchstack

25 credited records · 17 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for luc

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-32556
    28Monitor

    WordPress Boost plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    pixelyoursite professional · boostAug 24, 2026

  • CVE-2026-32555
    37Monitor

    WordPress Boost plugin <= 2.0.4 - SQL Injection vulnerability

    CriticalCVSS 9.3No exploitEPSS 0%

    pixelyoursite professional · boostAug 24, 2026

  • CVE-2026-66634
    17Monitor

    WordPress Modal Survey plugin <= 2.0.2.2.3 - Insecure Direct Object References (IDOR) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    pantherius · modal surveyAug 18, 2026

  • CVE-2026-73340
    26Monitor

    WordPress Featured Image from URL plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    fifu.app · featured image from urlAug 13, 2026

  • CVE-2026-28158
    28Monitor

    WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    lasso analytics, inc. · do lassoAug 13, 2026

  • CVE-2026-28157
    30Monitor

    WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    lasso analytics, inc. · do lassoAug 13, 2026

  • CVE-2026-28156
    34Monitor

    WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability

    HighCVSS 8.5No exploitEPSS 0%

    lasso analytics, inc. · do lassoAug 13, 2026

  • CVE-2026-28155
    26Monitor

    WordPress Do Lasso plugin <= 358 - Insecure Direct Object References (IDOR) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    lasso analytics, inc. · do lassoAug 13, 2026

  • CVE-2026-65442
    28Monitor

    WordPress FormCraft plugin <= 3.9.15 - Server Side Request Forgery (SSRF) vulnerability

    HighCVSS 7.2Proof of conceptEPSS 0%

    subtle web inc · formcraftJul 27, 2026

  • CVE-2026-65441
    28Monitor

    WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    nexcess · givewpJul 27, 2026

  • CVE-2026-61953
    28Monitor

    WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    quantumcloud · simple link directory proJul 27, 2026

  • CVE-2026-65433
    26Monitor

    WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Broken Access Control vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    themewant · rt mega menu – mega menu builder for elementor &amp; gutenbergJul 27, 2026

  • CVE-2026-65528
    26Monitor

    WordPress BSK PDF Manager plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    bannersky · bsk pdf managerJul 23, 2026

  • CVE-2026-61981
    21Monitor

    WordPress Simple Link Directory Pro plugin <= 15.0.8 - Cross Site Request Forgery (CSRF) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    quantumcloud · simple link directory proJul 23, 2026

  • CVE-2026-39598
    32Monitor

    WordPress Academy LMS Pro plugin < 3.5.2 - Arbitrary File Upload vulnerability

    HighCVSS 8.0No exploitEPSS 0%

    kodezen llc · academy lms proJun 17, 2026

  • CVE-2026-34888
    30Monitor

    WordPress Bricksforge plugin <= 3.1.8.4 - Sensitive Data Exposure vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    bricksforge · bricksforgeJun 17, 2026

  • CVE-2026-27983
    39Monitor

    WordPress LMS Elementor Pro plugin <= 1.0.4 - Privilege Escalation vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    designthemes · lms elementor proMar 5, 2026

  • CVE-2024-32444
    39Monitor

    WordPress RealHomes theme <= 4.3.6 - Privilege Escalation vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    inspirythemes · realhomesSep 3, 2025

  • CVE-2025-26927
    40Plan

    WordPress AI Hub plugin <= 1.3.7 - Arbitrary File Upload vulnerability

    CriticalCVSS 10.0No exploitEPSS 0%

    liquidthemes · ai hubApr 15, 2025

  • CVE-2025-31389
    28Monitor

    WordPress Sequel plugin <= 1.0.11 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    introvoke inc. dba sequel.io · sequelApr 4, 2025

  • CVE-2025-26924
    26Monitor

    WordPress Ohio Theme Extra plugin <= 3.4.7 - Shortcode Injection vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    colabrio · ohio extraMar 15, 2025

  • CVE-2024-51888
    39Monitor

    WordPress Homey Login Register Plugin <= 2.4.0 - Privilege Escalation vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    favethemes · homey login registerJan 21, 2025

  • CVE-2024-32555
    39Monitor

    WordPress Easy Real Estate plugin <= 2.2.6 - Privilege Escalation vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    inspirythemes · easy real estateJan 21, 2025

  • CVE-2024-43222
    39Monitor

    WordPress Sweet Date theme <= 3.7.3 - Privilege Escalation vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    seventhqueen · sweet dateDec 9, 2024

  • CVE-2024-24888
    26Monitor

    WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.2.25 - Server Side Request Forgery (SSRF) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiApr 2, 2024