Skip to content
Noroxi

Mika (Patchstack Alliance)

294 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers
  • CVE-2025-31027
    24Monitor

    WordPress Tiger theme <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    jocoxdesign · tigerMay 19, 2025

  • CVE-2025-23906
    26Monitor

    WordPress WordPress Dashboard Tweeter plugin <= 1.3.2 - Settings Change vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    wpseek · wordpress dashboard tweeterApr 17, 2025

  • CVE-2025-31418
    28Monitor

    WordPress Gravel theme <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    noonnoo · gravelApr 4, 2025

  • CVE-2025-31407
    26Monitor

    WordPress Tiger theme <= 2.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    hutsixdigital · tigerApr 4, 2025

  • CVE-2025-23763
    26Monitor

    WordPress WAH Forms plugin <= 1.0 - Sensitive Data Exposure vulnerability

    MediumCVSS 6.5No exploitEPSS 1%

    alex volkov · wah formsMar 3, 2025

  • CVE-2025-23761
    21Monitor

    WordPress Woo Tuner plugin <= 0.1.2 - Broken Access Control vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    alex volkov · woo tunerJan 16, 2025

  • CVE-2025-23760
    28Monitor

    WordPress Chatter plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    alex volkov · chatterJan 16, 2025

  • CVE-2023-47180
    26Monitor

    WordPress Finale Lite – Sales Countdown Timer & Discount for WooCommerce plugin <= 2.16.0 - Arbitrary Content Deletion vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    xlplugins · finaleJan 2, 2025

  • CVE-2023-46605
    21Monitor

    WordPress Convertful – Your Ultimate On-Site Conversion Tool plugin <= 2.5 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    ruslan suhar · convertful – your ultimate on-site conversion toolJan 2, 2025

  • CVE-2023-41803
    21Monitor

    WordPress BitPay Checkout for WooCommerce plugin <= 4.1.0 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 1%

    bitpay · bitpay checkout for woocommerceDec 13, 2024

  • CVE-2023-41686
    26Monitor

    WordPress Woocommerce Support System plugin <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    ilghera · woocommerce support systemDec 13, 2024

  • CVE-2023-41133
    21Monitor

    WordPress Secure Admin IP plugin <= 2.0 - IP Spoofing vulnerability

    MediumCVSS 5.3No exploitEPSS 1%

    michal novák · secure admin ipDec 13, 2024

  • CVE-2023-37971
    26Monitor

    WordPress WooCommerce Product Stock Alert plugin <= 2.0.1 - Broken Access Control vulnerability

    MediumCVSS 6.5No exploitEPSS 1%

    multivendorx · woocommerce product stock alertDec 13, 2024

  • CVE-2023-37969
    21Monitor

    WordPress Checkout with Zelle on Woocommerce plugin <= 3.1 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 1%

    the african boss · checkout with zelle on woocommerceDec 13, 2024

  • CVE-2023-36528
    21Monitor

    WordPress kk Star Ratings plugin <= 5.4.3 - Rate Manipulation due to IP Spoofing Vulnerability

    MediumCVSS 5.3No exploitEPSS 1%

    feedbackwp · kk star ratingsDec 13, 2024

  • CVE-2023-35875
    21Monitor

    WordPress Gutenverse – Gutenberg Blocks – Page Builder for Site Editor plugin <= 1.8.5 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 1%

    jegstudio · gutenverseDec 13, 2024

  • CVE-2023-34019
    26Monitor

    WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Broken Access Control vulnerability

    MediumCVSS 6.5No exploitEPSS 1%

    uncanny owl · uncanny toolkit for learndashDec 13, 2024

  • CVE-2023-32963
    21Monitor

    WordPress Predictive Search for WooCommerce plugin <= 5.8.0 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 1%

    a3rev software · woocommerce predictive searchDec 13, 2024

  • CVE-2023-32798
    21Monitor

    WordPress Simple Page Ordering plugin <= 2.5.0 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 1%

    10up · simple page orderingDec 13, 2024

  • CVE-2023-49818
    21Monitor

    WordPress Webflow Pages plugin <= 1.0.8 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 1%

    webflow · webflow pagesDec 9, 2024

  • CVE-2023-29433
    21Monitor

    WordPress tencentcloud-cos plugin <= 1.0.7 - Broken Access Control vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    腾讯云 · tencentcloud-cosDec 9, 2024

  • CVE-2023-27626
    21Monitor

    WordPress Stock Ticker plugin <= 3.23.0 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    aleksandar urošević · stock tickerDec 9, 2024

  • CVE-2023-27449
    25Monitor

    WordPress Total Poll Lite plugin <= 4.8.6 - Broken Access Control vulnerability

    MediumCVSS 6.3No exploitEPSS 0%

    totalsuite · total poll liteDec 9, 2024

  • CVE-2023-25486
    17Monitor

    WordPress Clone plugin <= 2.3.7 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 1%

    migrate · cloneDec 9, 2024

  • CVE-2023-23887
    21Monitor

    WordPress Easy Google Analytics for WordPress plugin <= 1.6.0 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 1%

    shaon · easy google analytics for wordpressDec 9, 2024