m0ze (Patchstack)

8 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
28Monitor	CVE-2022-33970No exploit	WordPress Shortcode Addons plugin <= 3.1.2 - Authenticated WordPress Options Change vulnerabilityoxilab · shortcode addons · CWE-264	High7.2	—	1.2%	Jul 27, 2022
28Monitor	CVE-2022-36375No exploit	WordPress Tabs plugin <= 3.6.0 - Authenticated WordPress Options Change vulnerabilityoxilab · responsive tabs · CWE-264	High7.2	—	1.3%	Jul 25, 2022
28Monitor	CVE-2022-33969No exploit	WordPress Flipbox plugin <= 2.6.0 - Authenticated WordPress Options Change vulnerabilityoxilab · flipbox · CWE-264	High7.2	—	1.3%	Jul 25, 2022
21Monitor	CVE-2022-34853No exploit	WordPress Team plugin <= 1.2.6 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilitieswpwax · team · CWE-79 XSS	Medium5.4	—	0.6%	Jul 22, 2022
35Monitor	CVE-2022-33960No exploit	WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Authenticated SQL Injection (SQLi) vulnerabilitiessupsystic · social share buttons · CWE-89 SQL injection	High8.8	—	1.0%	Jul 22, 2022
35Monitor	CVE-2022-27235No exploit	WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Broken Access Control vulnerabilitiessupsystic · social share buttons · CWE-264 Broken access control (IDOR)	High8.8	—	0.9%	Jul 22, 2022
22Monitor	CVE-2022-34487Proof of concept	WordPress Shortcode Addons plugin <= 3.0.2 - Unauthenticated Arbitrary Option Update vulnerabilityoxilab · shortcode addons · CWE-264 Pre-auth	Medium5.3	—	3.3%	Jul 21, 2022
22Monitor	CVE-2022-33198Proof of concept	WordPress Accordions plugin <= 2.0.2 - Unauthenticated WordPress Options Change vulnerabilityoxilab · accordions · CWE-264 Pre-auth	Medium5.3	—	3.3%	Jul 21, 2022

CVE-2022-33970
28Monitor
WordPress Shortcode Addons plugin <= 3.1.2 - Authenticated WordPress Options Change vulnerability
HighCVSS 7.2No exploitEPSS 1%
oxilab · shortcode addonsJul 27, 2022
CVE-2022-36375
28Monitor
WordPress Tabs plugin <= 3.6.0 - Authenticated WordPress Options Change vulnerability
HighCVSS 7.2No exploitEPSS 1%
oxilab · responsive tabsJul 25, 2022
CVE-2022-33969
28Monitor
WordPress Flipbox plugin <= 2.6.0 - Authenticated WordPress Options Change vulnerability
HighCVSS 7.2No exploitEPSS 1%
oxilab · flipboxJul 25, 2022
CVE-2022-34853
21Monitor
WordPress Team plugin <= 1.2.6 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities
MediumCVSS 5.4No exploitEPSS 1%
- XSS
wpwax · teamJul 22, 2022
CVE-2022-33960
35Monitor
WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities
HighCVSS 8.8No exploitEPSS 1%
- SQL injection
supsystic · social share buttonsJul 22, 2022
CVE-2022-27235
35Monitor
WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Broken Access Control vulnerabilities
HighCVSS 8.8No exploitEPSS 1%
- Broken access control (IDOR)
supsystic · social share buttonsJul 22, 2022
CVE-2022-34487
22Monitor
WordPress Shortcode Addons plugin <= 3.0.2 - Unauthenticated Arbitrary Option Update vulnerability
MediumCVSS 5.3Proof of conceptEPSS 3%
- Pre-auth
oxilab · shortcode addonsJul 21, 2022
CVE-2022-33198
22Monitor
WordPress Accordions plugin <= 2.0.2 - Unauthenticated WordPress Options Change vulnerability
MediumCVSS 5.3Proof of conceptEPSS 3%
- Pre-auth
oxilab · accordionsJul 21, 2022