Skip to content
Noroxi

Phd (Patchstack Alliance)

21 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers
  • CVE-2023-41648
    24Monitor

    WordPress Login and Logout Redirect Plugin <= 2.0.3 is vulnerable to Open Redirection

    MediumCVSS 6.1No exploitEPSS 0%

    swapnilpatil · login and logout redirectDec 19, 2023

  • CVE-2023-38481
    24Monitor

    WordPress Integration for WooCommerce and Zoho CRM Plugin < 1.3.7 is vulnerable to Open Redirection

    MediumCVSS 6.1No exploitEPSS 0%

    crmperks · integration for woocommerce and zoho crm\, books\, invoice\, inventory\, biginDec 19, 2023

  • CVE-2023-38478
    24Monitor

    WordPress Integration for WooCommerce and QuickBooks Plugin <= 1.2.3 is vulnerable to Open Redirection

    MediumCVSS 6.1No exploitEPSS 0%

    crmperks · integration for woocommerce and quickbooksDec 19, 2023

  • CVE-2023-49185
    24Monitor

    WordPress Doofinder for WooCommerce Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    doofinder · doofinderDec 15, 2023

  • CVE-2023-45762
    24Monitor

    WordPress Responsive Column Widgets Plugin <= 1.2.7 is vulnerable to Open Redirection

    MediumCVSS 6.1No exploitEPSS 0%

    michaeluno · responsive column widgetsDec 7, 2023

  • CVE-2023-48746
    24Monitor

    WordPress Community by PeepSo Plugin <= 6.2.6.0 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    peepso · peepsoNov 30, 2023

  • CVE-2023-38474
    24Monitor

    WordPress Campaign Monitor for WordPress Plugin <= 2.8.12 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    campaignmonitor · campaign monitorNov 30, 2023

  • CVE-2023-46094
    24Monitor

    WordPress Conversios.io Plugin <= 6.5.3 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    conversios · google analytics integration for woocommerceOct 26, 2023

  • CVE-2023-45637
    24Monitor

    WordPress EventPrime Plugin <= 3.1.5 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    metagauss · eventprimeOct 25, 2023

  • CVE-2023-45065
    24Monitor

    WordPress Bulk NoIndex & NoFollow Toolkit Plugin <= 1.42 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    madfishdigital · bulk noindex \& nofollow toolkitOct 18, 2023

  • CVE-2023-41874
    24Monitor

    WordPress Order Delivery Date for WooCommerce Plugin <= 3.20.0 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    tychesoftwares · order delivery date for woocommerceSep 24, 2023

  • CVE-2023-40554
    24Monitor

    WordPress Blog2Social Plugin <= 7.2.0 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    adenion · blog2socialSep 6, 2023

  • CVE-2023-31220
    24Monitor

    WordPress WP Categories Widget Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    wp-experts · wp-categories-widgetSep 4, 2023

  • CVE-2023-37893
    24Monitor

    WordPress Coming Soon Chop Chop Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    chop-chop · coming soon chop chopSep 1, 2023

  • CVE-2023-32109
    24Monitor

    WordPress Albo Pretorio Online Plugin <= 4.6.3 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    eduva · albo pretorio onlineAug 18, 2023

  • CVE-2023-39314
    24Monitor

    WordPress Leyka Plugin <= 3.30.2 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    te-st · leykaAug 10, 2023

  • CVE-2023-38392
    24Monitor

    WordPress Custom Field Template Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    wpgogo · custom field templateAug 7, 2023

  • CVE-2023-34010
    24Monitor

    WordPress Media Library Assistant Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    davidlingren · media library assistantAug 5, 2023

  • CVE-2023-37975
    24Monitor

    WordPress Variation Swatches for WooCommerce Plugin <= 2.3.7 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    variation swatches for woocommerce project · variation swatches for woocommerceJul 27, 2023

  • CVE-2023-34021
    24Monitor

    WordPress Church Admin Plugin <= 3.7.29 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    church admin project · church adminJun 23, 2023

  • CVE-2023-28750
    24Monitor

    WordPress Albo Pretorio Online Plugin <= 4.6 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    albo pretorio on line project · albo pretorio on lineJun 22, 2023