Skip to content
Noroxi

mroccon

Patchstack Bug Bounty Program

28 credited records · 28 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for mroccon

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits every 10 minutes on paid plans, on the hour on the free plan.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • CVE alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools, at most 30 a day (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-124271
    21Monitor

    WordPress Restrict User Access – Membership plugin with Force plugin <= 2.8.3 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    dev institute · restrict user access – membership plugin with force1 day ago

  • CVE-2026-121570
    28Monitor

    WordPress RSVP and Event Management plugin <= 2.7.17 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    wp chill · rsvp and event management3 days ago

  • CVE-2026-123484
    28Monitor

    WordPress JetFormBuilder plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    crocoblock · jetformbuilder3 days ago

  • CVE-2026-121763
    26Monitor

    WordPress Hummingbird plugin <= 3.21.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    wpmu dev · hummingbird3 days ago

  • CVE-2026-119504
    28Monitor

    WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    dynamiapps · frontend admin by dynamiapps3 days ago

  • CVE-2026-119490
    21Monitor

    WordPress Better Notifications for WP plugin <= 1.10.1 - Content Injection vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    made with fuel ltd. · better notifications for wp5 days ago

  • CVE-2026-119478
    17Monitor

    WordPress MasterStudy LMS plugin <= 3.7.56 - Content Injection vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    stylemixthemes · masterstudy lms5 days ago

  • CVE-2026-119484
    25Monitor

    WordPress Photo Gallery by Supsystic plugin <= 1.21.6 - Cross Site Request Forgery (CSRF) vulnerability

    MediumCVSS 6.3No exploitEPSS 0%

    supsystic · photo gallery by supsystic5 days ago

  • CVE-2026-119465
    21Monitor

    WordPress Elementor Addon Elements plugin <= 1.15 - Sensitive Data Exposure vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    wpvibes · elementor addon elements5 days ago

  • CVE-2026-120849
    17Monitor

    WordPress WCFM Marketplace plugin <= 3.8.3 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    wc lovers · wcfm marketplace6 days ago

  • CVE-2026-120848
    26Monitor

    WordPress WCFM Marketplace plugin <= 3.8.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    wc lovers · wcfm marketplace6 days ago

  • CVE-2026-119510
    26Monitor

    WordPress MC Woocommerce Wishlist plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    saeed · mc woocommerce wishlist6 days ago

  • CVE-2026-123471
    17Monitor

    WordPress myCred plugin <= 4.0.2 - Content Injection vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    mycred · mycred6 days ago

  • CVE-2026-57666
    28Monitor

    WordPress WP Customer Area plugin <= 8.4.1 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    aguila technologies · wp customer areaNov 4, 2026

  • CVE-2026-54855
    28Monitor

    WordPress Profile Builder plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    cozmoslabs · profile builderOct 30, 2026

  • CVE-2026-39734
    30Monitor

    WordPress WP EasyPay plugin <= 4.5.4 - Path Traversal vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    saad iqbal · wp easypayOct 30, 2026

  • CVE-2026-116386
    39Monitor

    WordPress SMS Alert Order Notifications plugin <= 4.0.2 - Privilege Escalation vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    cozy vision technologies pvt. ltd. · sms alert order notificationsOct 30, 2026

  • CVE-2026-48884
    21Monitor

    WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    wedevs · wp user frontendOct 29, 2026

  • CVE-2026-116846
    21Monitor

    WordPress WP User Manager plugin <= 2.9.26 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    wp user manager · wp user managerOct 29, 2026

  • CVE-2026-48195
    26Monitor

    WordPress PDF Poster plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    bplugins · pdf posterOct 29, 2026

  • CVE-2026-42707
    17Monitor

    WordPress HivePress Claim Listings plugin <= 1.1.4 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    hivepress · hivepress claim listingsOct 29, 2026

  • CVE-2026-116399
    35Monitor

    WordPress InstaWP Connect plugin <= 0.1.4.2 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    instawp · instawp connectOct 29, 2026

  • CVE-2026-48196
    26Monitor

    WordPress Kali Forms plugin <= 2.4.27 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    kaliforms · kali formsOct 29, 2026

  • CVE-2026-39741
    21Monitor

    WordPress Simple Cloudflare Turnstile plugin <= 1.44.0 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    relywp · simple cloudflare turnstileOct 29, 2026

  • CVE-2026-118093
    21Monitor

    WordPress Product Feed Manager plugin <= 7.14.1 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    wpfunnels team · product feed managerOct 29, 2026