Skip to content
Noroxi

Mdr

Patchstack Bug Bounty Program

12 credited records · 12 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Mdr

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-25005
    21Monitor

    WordPress Frontend File Manager plugin <= 23.5 - Insecure Direct Object References (IDOR) vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    n-media · frontend file managerFeb 19, 2026

  • CVE-2026-24577
    21Monitor

    WordPress Pie Register plugin <= 3.8.4.8 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    genetech products · pie registerJan 23, 2026

  • CVE-2025-69312
    36Monitor

    WordPress Xpro Elementor Addons plugin <= 1.4.19.1 - Arbitrary File Upload vulnerability

    CriticalCVSS 9.1No exploitEPSS 0%

    xpro · xpro elementor addonsJan 22, 2026

  • CVE-2025-67956
    32Monitor

    WordPress User Registration plugin <= 4.4.6 - Broken Access Control vulnerability

    HighCVSS 8.2No exploitEPSS 0%

    wpeverest · user registrationJan 22, 2026

  • CVE-2025-63053
    21Monitor

    WordPress Master Addons for Elementor plugin <= 2.0.9.9.4 - Insecure Direct Object References (IDOR) vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    liton arefin · master addons for elementorDec 31, 2025

  • CVE-2025-68494
    21Monitor

    WordPress Premium Addons for Elementor plugin <= 4.11.53 - Sensitive Data Exposure vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    leap13 · premium addons for elementorDec 24, 2025

  • CVE-2025-66116
    30Monitor

    WordPress Ultimate Member Widgets for Elementor plugin <= 2.3 - Sensitive Data Exposure vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    userelements · ultimate member widgets for elementorDec 18, 2025

  • CVE-2025-67594
    17Monitor

    WordPress Thim Elementor Kit plugin <= 1.3.3 - Insecure Direct Object References (IDOR) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    thimpress · thim elementor kitDec 9, 2025

  • CVE-2025-67543
    26Monitor

    WordPress Essential Widgets plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    catchthemes · essential widgetsDec 9, 2025

  • CVE-2025-63077
    17Monitor

    WordPress Happy Addons for Elementor plugin <= 3.20.3 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    happymonster · happy addons for elementorDec 9, 2025

  • CVE-2025-63042
    26Monitor

    WordPress Tutor LMS Elementor Addons plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    themeum · tutor lms elementor addonsDec 9, 2025

  • CVE-2025-63033
    23Monitor

    WordPress Make Section & Column Clickable For Elementor plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    riyadh ahmed · make section & column clickable for elementorDec 9, 2025