Skip to content
Noroxi

Mrreee

Patchstack Bug Bounty Program

10 credited records · 10 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Mrreee

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-24628
    23Monitor

    WordPress Photo Gallery by Supsystic plugin <= 1.16.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    supsystic · photo gallery by supsysticJul 23, 2026

  • CVE-2026-22480
    28Monitor

    WordPress Product Feed for WooCommerce plugin <= 2.3.3 - PHP Object Injection vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    webtoffee · product feed for woocommerceMar 25, 2026

  • CVE-2026-22471
    35Monitor

    WordPress Secudeal Payments for Ecommerce plugin <= 1.1 - PHP Object Injection vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    maximsecudeal · secudeal payments for ecommerceMar 5, 2026

  • CVE-2026-24966
    17Monitor

    WordPress Copyscape Premium plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    copyscape · copyscape premiumFeb 3, 2026

  • CVE-2026-24624
    30Monitor

    WordPress Neoforum plugin <= 1.0 - SQL Injection vulnerability

    HighCVSS 7.6No exploitEPSS 0%

    saeros1984 · neoforumJan 23, 2026

  • CVE-2026-24623
    28Monitor

    WordPress Neoforum plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    saeros1984 · neoforumJan 23, 2026

  • CVE-2026-24622
    21Monitor

    WordPress Suggestion Toolkit plugin <= 5.0 - Broken Access Control vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    sergiy dzysyak · suggestion toolkitJan 23, 2026

  • CVE-2026-24621
    23Monitor

    WordPress Terms descriptions plugin <= 3.4.9 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    vladimir statsenko · terms descriptionsJan 23, 2026

  • CVE-2026-24384
    21Monitor

    WordPress Merge + Minify + Refresh plugin <= 2.14 - Cross Site Request Forgery (CSRF) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    launchinteractive · merge + minify + refreshJan 22, 2026

  • CVE-2026-22470
    30Monitor

    WordPress FireStorm Professional Real Estate plugin <= 2.7.11 - SQL Injection vulnerability

    HighCVSS 7.6No exploitEPSS 0%

    firestorm plugins · firestorm professional real estateJan 22, 2026