Skip to content
Noroxi

Psai

Patchstack Bug Bounty Program

11 credited records · 2 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Psai

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits every 10 minutes on paid plans, on the hour on the free plan.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools, at most 30 a day (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-27440
    26Monitor

    WordPress myCred plugin <= 2.9.7.6 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    saad iqbal · mycredFeb 19, 2026

  • CVE-2025-63030
    28Monitor

    WordPress New User Approve plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    saad iqbal · new user approveDec 9, 2025

  • CVE-2025-60098
    26Monitor

    WordPress Theme My Login Plugin <= 7.1.12 - Broken Access Control Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    jeff farthing · theme my loginSep 26, 2025

  • CVE-2025-39400
    24Monitor

    WordPress User Registration plugin < 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    wpeverest · user registration \& membershipApr 24, 2025

  • CVE-2025-31011
    28Monitor

    WordPress SimplyRETS Real Estate IDX plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    reichertbrothers · simplyrets real estate idxApr 15, 2025

  • CVE-2025-31001
    30Monitor

    WordPress GTM Kit plugin <= 2.4.0 - Sensitive Data Exposure vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    tla media · gtm kitApr 1, 2025

  • CVE-2025-31010
    17Monitor

    WordPress SimplyRETS Real Estate IDX plugin <= 3.0.5 - CSRF to Multiple Admin Actions vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    reichertbrothers · simplyrets real estate idxMar 28, 2025

  • CVE-2025-27001
    26Monitor

    WordPress Shipmondo – A complete shipping solution for WooCommerce plugin <= 5.0.3 - Authenticated Arbitrary WordPress Option Disclosure vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    shipmondo · shipmondo – a complete shipping solution for woocommerceMar 28, 2025

  • CVE-2025-31101
    23Monitor

    WordPress VaultRE Contact Form 7 plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    vault group pty ltd · vaultre contact form 7Mar 27, 2025

  • CVE-2025-31031
    23Monitor

    WordPress Job Colors for WP Job Manager plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    astoundify · job colors for wp job managerMar 27, 2025

  • CVE-2025-27000
    21Monitor

    WordPress Simple Photo Feed Plugin <= 1.4.0 - Broken Access Control vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    george pattichis · simple photo feedFeb 25, 2025