Michael (Patchstack Alliance)
17 credited records · 0 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
26Monitor | CVE-2025-26739No exploit | WordPress newseqo theme <= 2.1.1 - Stored Cross Site Scripting (XSS) vulnerabilitythemefunction · newseqo · CWE-79 | Medium6.5 | — | 0.4% | Mar 26, 2025 |
26Monitor | CVE-2025-22334No exploit | WordPress Education LMS theme <= 0.0.7 - Stored Cross Site Scripting (XSS) vulnerabilityfilathemes · education lms · CWE-79 | Medium6.5 | — | 0.3% | Jan 7, 2025 |
19Monitor | CVE-2024-51685No exploit | WordPress Accordion title for Elementor plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerabilitymigaweb · accordion title for elementor · CWE-79 | Medium4.8 | — | 0.2% | Nov 4, 2024 |
21Monitor | CVE-2024-44063No exploit | WordPress Happyforms plugin <= 1.26.0 - Cross Site Scripting (XSS) vulnerabilityhappyforms · happyforms · CWE-79 | Medium5.4 | — | 0.3% | Sep 15, 2024 |
21Monitor | CVE-2024-43292No exploit | WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <= 1.4.16 - Cross Site Scripting (XSS) vulnerabilityenvothemes · envo\'s elementor templates \& widgets for woocommerce · CWE-79 | Medium5.4 | — | 0.3% | Aug 18, 2024 |
19Monitor | CVE-2024-43291No exploit | WordPress Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerabilityvoidcoders · void contact form 7 widget for elementor page builder · CWE-79 | Medium4.8 | — | 0.3% | Aug 18, 2024 |
26Monitor | CVE-2024-43307No exploit | WordPress Structured Content (JSON-LD) #wpsc plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerabilitygordon böhme, antonio leutsch · structured content · CWE-79 | Medium6.5 | — | 0.3% | Aug 18, 2024 |
19Monitor | CVE-2024-43324No exploit | WordPress Clever Addons for Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerabilitycleversoft · clever addons for elementor · CWE-79 | Medium4.8 | — | 0.3% | Aug 18, 2024 |
21Monitor | CVE-2024-43225No exploit | WordPress Enter Addons plugin <= 2.1.7 - Cross Site Scripting (XSS) vulnerabilitythemelooks · enter addons · CWE-79 | Medium5.4 | — | 0.3% | Aug 12, 2024 |
21Monitor | CVE-2024-39644No exploit | WordPress Black Widgets For Elementor plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerabilitymodernaweb · black widgets for elementor · CWE-79 | Medium5.4 | — | 0.3% | Aug 1, 2024 |
19Monitor | CVE-2024-39629No exploit | WordPress Himalayas theme <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilitythemegrill · himalayas · CWE-79 | Medium4.8 | — | 0.3% | Aug 1, 2024 |
24Monitor | CVE-2024-35656No exploit | WordPress Elementor Pro <= 3.21.2 - Reflected Cross Site Scripting (XSS) vulnerabilityelementor · elementor pro · CWE-79 | Medium6.1 | — | 0.3% | Jul 22, 2024 |
24Monitor | CVE-2024-37432No exploit | WordPress Esteem theme <= 1.5.0 - Cross Site Scripting (XSS) vulnerabilitythemegrill · esteem · CWE-79 | Medium6.1 | — | 0.3% | Jul 22, 2024 |
21Monitor | CVE-2024-37480No exploit | WordPress Apollo13 Framework Extensions plugin <= 1.9.3 - Cross Site Scripting (XSS) vulnerabilityapollo13themes · apollo13 framework extensions · CWE-79 | Medium5.4 | — | 0.3% | Jul 21, 2024 |
23Monitor | CVE-2024-37565No exploit | WordPress Gum Elementor Addon plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerabilitytemegum · gum elementor addon · CWE-79 | Medium5.9 | — | 0.3% | Jul 20, 2024 |
19Monitor | CVE-2024-38710No exploit | WordPress Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin <= 2.0.6.2 - Cross Site Scripting (XSS) vulnerabilitymaster-addons · master addons · CWE-79 | Medium4.8 | — | 0.3% | Jul 20, 2024 |
21Monitor | CVE-2024-38705No exploit | WordPress ElementInvader Addons for Elementor plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerabilityelementinvader · elementinvader addons for elementor · CWE-79 | Medium5.4 | — | 0.3% | Jul 20, 2024 |
- CVE-2025-2673926Monitor
WordPress newseqo theme <= 2.1.1 - Stored Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%themefunction · newseqoMar 26, 2025
- CVE-2025-2233426Monitor
WordPress Education LMS theme <= 0.0.7 - Stored Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%filathemes · education lmsJan 7, 2025
- CVE-2024-5168519Monitor
WordPress Accordion title for Elementor plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 4.8No exploitEPSS 0%migaweb · accordion title for elementorNov 4, 2024
- CVE-2024-4406321Monitor
WordPress Happyforms plugin <= 1.26.0 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%happyforms · happyformsSep 15, 2024
- CVE-2024-4329221Monitor
WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <= 1.4.16 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%envothemes · envo\'s elementor templates \& widgets for woocommerceAug 18, 2024
- CVE-2024-4329119Monitor
WordPress Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 4.8No exploitEPSS 0%voidcoders · void contact form 7 widget for elementor page builderAug 18, 2024
- CVE-2024-4330726Monitor
WordPress Structured Content (JSON-LD) #wpsc plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%gordon böhme, antonio leutsch · structured contentAug 18, 2024
- CVE-2024-4332419Monitor
WordPress Clever Addons for Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 4.8No exploitEPSS 0%cleversoft · clever addons for elementorAug 18, 2024
- CVE-2024-4322521Monitor
WordPress Enter Addons plugin <= 2.1.7 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%themelooks · enter addonsAug 12, 2024
- CVE-2024-3964421Monitor
WordPress Black Widgets For Elementor plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%modernaweb · black widgets for elementorAug 1, 2024
- CVE-2024-3962919Monitor
WordPress Himalayas theme <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 4.8No exploitEPSS 0%themegrill · himalayasAug 1, 2024
- CVE-2024-3565624Monitor
WordPress Elementor Pro <= 3.21.2 - Reflected Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.1No exploitEPSS 0%elementor · elementor proJul 22, 2024
- CVE-2024-3743224Monitor
WordPress Esteem theme <= 1.5.0 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.1No exploitEPSS 0%themegrill · esteemJul 22, 2024
- CVE-2024-3748021Monitor
WordPress Apollo13 Framework Extensions plugin <= 1.9.3 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%apollo13themes · apollo13 framework extensionsJul 21, 2024
- CVE-2024-3756523Monitor
WordPress Gum Elementor Addon plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.9No exploitEPSS 0%temegum · gum elementor addonJul 20, 2024
- CVE-2024-3871019Monitor
WordPress Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin <= 2.0.6.2 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 4.8No exploitEPSS 0%master-addons · master addonsJul 20, 2024
- CVE-2024-3870521Monitor
WordPress ElementInvader Addons for Elementor plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%elementinvader · elementinvader addons for elementorJul 20, 2024