Skip to content
Noroxi

Prissy

Patchstack Bug Bounty Program

38 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers
  • CVE-2025-60138
    26Monitor

    WordPress SKT Blocks plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    sonalsinha21 · skt blocksSep 26, 2025

  • CVE-2025-60124
    26Monitor

    WordPress Simple Colorbox Plugin <= 1.6.1 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    ryan hellyer · simple colorboxSep 26, 2025

  • CVE-2025-58228
    26Monitor

    WordPress Quick View for WooCommerce Plugin <= 2.2.16 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    shapedplugin llc · quick view for woocommerceSep 22, 2025

  • CVE-2025-58027
    26Monitor

    WordPress NGG Smart Image Search Plugin <= 3.4.3 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    wpo-hr · ngg smart image searchSep 22, 2025

  • CVE-2025-57967
    26Monitor

    WordPress WPB Quick View for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    wpbean · wpb quick view for woocommerceSep 22, 2025

  • CVE-2025-57966
    26Monitor

    WordPress Gallery Lightbox plugin <= 1.0.0.41 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    ghozylab · gallery lightboxSep 22, 2025

  • CVE-2025-57900
    26Monitor

    WordPress GutenKit Plugin <= 2.4.2 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    ataur r · gutenkitSep 22, 2025

  • CVE-2025-58812
    26Monitor

    WordPress Best Restaurant Menu by PriceListo Plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    pricelisto · best restaurant menu by pricelistoSep 5, 2025

  • CVE-2025-58808
    26Monitor

    WordPress prettyPhoto Plugin <= 1.2.5 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    babar · prettyphotoSep 5, 2025

  • CVE-2025-58793
    26Monitor

    WordPress WPB Elementor Addons plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    wpbean · wpb elementor addonsSep 5, 2025

  • CVE-2025-58784
    26Monitor

    WordPress ARI Fancy Lightbox Plugin <= 1.4.0 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    arisoft · ari fancy lightboxSep 5, 2025

  • CVE-2025-48349
    26Monitor

    WordPress Video Gallery – Vimeo and YouTube Gallery plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    origincode · video gallery – vimeo and youtube galleryAug 28, 2025

  • CVE-2025-49397
    26Monitor

    WordPress Colorbox Lightbox Plugin <= 1.1.5 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    noor alam · colorbox lightboxAug 20, 2025

  • CVE-2025-54051
    26Monitor

    WordPress LightBox Block plugin <= 1.1.30 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    bplugins · lightbox blockJul 16, 2025

  • CVE-2025-54050
    21Monitor

    WordPress Responsive Addons for Elementor plugin <= 1.7.3 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    cyberchimps · responsive addons for elementorJul 16, 2025

  • CVE-2025-27326
    26Monitor

    WordPress Video Gallery Block plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    bplugins · video gallery blockJul 4, 2025

  • CVE-2025-26591
    26Monitor

    WordPress WP fancybox plugin <= 1.0.3 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    noor alam · wp fancyboxJul 4, 2025

  • CVE-2025-49032
    26Monitor

    WordPress Gutenberg Blocks plugin <= 3.3.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    publishpress · gutenberg blocksJul 3, 2025

  • CVE-2025-53339
    30Monitor

    WordPress Devnex Addons For Elementor plugin <= 1.0.9 - Local File Inclusion Vulnerability

    HighCVSS 7.5No exploitEPSS 1%

    devnex · devnex addons for elementorJun 27, 2025

  • CVE-2025-52707
    26Monitor

    WordPress Firelight Lightbox plugin <= 2.3.16 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    firelight · firelight lightboxJun 20, 2025

  • CVE-2025-50041
    26Monitor

    WordPress Gutenberg Blocks – ACF Blocks Suite plugin <= 2.6.11 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    wp engine · gutenberg blocks – acf blocks suiteJun 20, 2025

  • CVE-2025-50038
    26Monitor

    WordPress Anant Addons for Elementor plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    anantaddons · anant addons for elementorJun 20, 2025

  • CVE-2025-49235
    26Monitor

    WordPress RTMKit Addons for Elementor plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    rometheme · rtmkitJun 6, 2025

  • CVE-2025-30952
    26Monitor

    WordPress Nexa Blocks plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    wpdive · nexa blocksJun 6, 2025

  • CVE-2025-30951
    26Monitor

    WordPress BlockStrap Page Builder - Bootstrap Blocks plugin <= 0.1.36 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    stiofan · blockstrap page builder - bootstrap blocksJun 6, 2025