Mochamad Sofyan (Patchstack Alliance)
6 credited records · 0 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
14Monitor | CVE-2024-37234No exploit | WordPress Academy LMS plugin <= 2.0.4 - Open Redirection vulnerabilitykodezen limited · academy lms · CWE-601 | Low3.5 | — | 0.2% | Jul 6, 2024 |
21Monitor | CVE-2024-34799No exploit | WordPress BookingPress plugin <= 1.0.82 - Appointment Duration Manipulation vulnerabilityreputeinfosystems · bookingpress · CWE-862 | Medium5.3 | — | 0.3% | Jun 11, 2024 |
35Monitor | CVE-2024-32714No exploit | WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control vulnerabilitykodezen · academy lms · CWE-862 | High8.8 | — | 0.3% | Jun 9, 2024 |
21Monitor | CVE-2024-32720No exploit | WordPress Appointment Hour Booking plugin <= 1.4.56 - Captcha Bypass vulnerabilitycodepeople · appointment hour booking · CWE-307 | Medium5.3 | — | 0.3% | May 17, 2024 |
26Monitor | CVE-2024-27991No exploit | WordPress SupportCandy plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerabilitysupportcandy · supportcandy · CWE-79 | Medium6.5 | — | 0.3% | Apr 10, 2024 |
19Monitor | CVE-2024-29776No exploit | WordPress EventPrime plugin <= 3.3.9 - Cross Site Scripting (XSS) vulnerabilitymetagauss · eventprime · CWE-79 | Medium4.8 | — | 0.3% | Mar 27, 2024 |
- CVE-2024-3723414Monitor
WordPress Academy LMS plugin <= 2.0.4 - Open Redirection vulnerability
LowCVSS 3.5No exploitEPSS 0%kodezen limited · academy lmsJul 6, 2024
- CVE-2024-3479921Monitor
WordPress BookingPress plugin <= 1.0.82 - Appointment Duration Manipulation vulnerability
MediumCVSS 5.3No exploitEPSS 0%reputeinfosystems · bookingpressJun 11, 2024
- CVE-2024-3271435Monitor
WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control vulnerability
HighCVSS 8.8No exploitEPSS 0%kodezen · academy lmsJun 9, 2024
- CVE-2024-3272021Monitor
WordPress Appointment Hour Booking plugin <= 1.4.56 - Captcha Bypass vulnerability
MediumCVSS 5.3No exploitEPSS 0%codepeople · appointment hour bookingMay 17, 2024
- CVE-2024-2799126Monitor
WordPress SupportCandy plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%supportcandy · supportcandyApr 10, 2024
- CVE-2024-2977619Monitor
WordPress EventPrime plugin <= 3.3.9 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 4.8No exploitEPSS 0%metagauss · eventprimeMar 27, 2024