Skip to content
Noroxi

Santh

13 credited records · 13 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Santh

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits every 10 minutes on paid plans, on the hour on the free plan.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • CVE alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools, at most 30 a day (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-120540
    28Monitor

    iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.13.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content via IUB-COOKIE

    HighCVSS 7.2No exploitEPSS 0%

    iubenda · iubenda | all-in-one compliance for gdpr / ccpa cookie consent + more6 days ago

  • CVE-2026-119213
    14Monitor

    Fluent Support <= 2.4.7 — Unauthenticated Limited Modification of Linked Customer Profile Fields via Fluent Forms Feed

    LowCVSS 3.7No exploitEPSS 0%

    wpmanageninja · fluent support – helpdesk & customer support ticket system6 days ago

  • CVE-2026-119175
    28Monitor

    Flying Images: Optimize and Lazy Load Images for Faster Page Speed <= 2.4.15 - Unauthenticated Stored Cross-Site Scripting via Comment Content

    HighCVSS 7.2No exploitEPSS 0%

    gijo · flying images: optimize and lazy load images for faster page speed6 days ago

  • CVE-2026-119178
    21Monitor

    Smart Cookie Kit <= 2.3.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Bundled Simple HTML DOM Noise Restoration

    MediumCVSS 5.4No exploitEPSS 0%

    shark986 · smart cookie kit6 days ago

  • CVE-2026-93389
    32Monitor

    LiteSpeed Cache <= 7.9.1 - Unauthenticated Sensitive Information Disclosure (WooCommerce Store API Cart/Checkout PII + Cart-Token) via Public REST Caching

    HighCVSS 8.2No exploitEPSS 0%

    litespeedtech · litespeed cacheNov 5, 2026

  • CVE-2026-109367
    21Monitor

    All in One SEO <= 5.0.3 - Unauthenticated Sensitive Information Disclosure in 's' Search Query Parameter

    MediumCVSS 5.3No exploitEPSS 0%

    smub · all in one seo – ai seo plugin to boost seo rankings & traffic (schema, local seo, sitemap & seo insights)Oct 31, 2026

  • CVE-2026-120019
    21Monitor

    W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Predictable Minify Placeholder

    MediumCVSS 5.4Proof of conceptEPSS 0%

    boldgrid · w3 total cacheOct 31, 2026

  • CVE-2026-111254
    28Monitor

    W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content Cached as HTML after License Expiry

    HighCVSS 7.2No exploitEPSS 0%

    boldgrid · w3 total cacheOct 31, 2026

  • CVE-2026-109217
    21Monitor

    PDF Invoices & Packing Slips for WooCommerce <= 5.16.5 - Unauthenticated Sensitive Information Exposure via Yearly-Reset Invoice Attachment Cache

    MediumCVSS 5.3No exploitEPSS 0%

    wpovernight · pdf invoices & packing slips for woocommerceOct 31, 2026

  • CVE-2026-109234
    28Monitor

    Meow Lightbox <= 5.6.4 - Unauthenticated Stored Cross-Site Scripting via HTML Parser Quote-Metadata Desynchronization

    HighCVSS 7.2No exploitEPSS 0%

    tigroumeow · meow lightboxOct 31, 2026

  • CVE-2026-116763
    21Monitor

    LiteSpeed Cache <= 7.9.1 - Unauthenticated Stored Cross-Site Scripting via HTML Minifier Predictable Placeholder (md5(REQUEST_TIME) + two-pass str_replace)

    MediumCVSS 5.4No exploitEPSS 0%

    litespeedtech · litespeed cacheOct 29, 2026

  • CVE-2026-109990
    28Monitor

    Flying Scripts: Delay JavaScript to Improve Site Speed & Performance <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting via Comment Content

    HighCVSS 7.2No exploitEPSS 0%

    gijo · flying scripts: delay javascript to improve site speed & performanceOct 16, 2026

  • CVE-2026-101324
    18Monitor

    Fluent Forms <= 6.2.14 - Reflected Cross-Site Scripting via '{get.*}' Editor SmartCode Parameter

    MediumCVSS 4.7No exploitEPSS 0%

    wpmanageninja · fluent forms – customizable contact forms, survey, quiz, & conversational form builderOct 10, 2026