Skip to content
Noroxi

Savphill (Patchstack Alliance)

21 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Savphill (Patchstack Alliance)

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2025-31837
    23Monitor

    WordPress WP Proposals plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    wp codeus · wp proposalsApr 1, 2025

  • CVE-2024-37218
    17Monitor

    WordPress Page Builder Sandwich <= 5.1.0 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    wordpress page builder sandwich team · page builder sandwich – front-end page builderNov 1, 2024

  • CVE-2024-43344
    26Monitor

    WordPress Icegram Engage – Ultimate WP Popup Builder, Lead Generation, Optins, and CTA plugin <= 3.1.25 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    icegram · icegramAug 18, 2024

  • CVE-2024-43125
    26Monitor

    WordPress WP Table Builder plugin <= 1.4.15 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    dotcamp · wp table builderAug 12, 2024

  • CVE-2024-43161
    19Monitor

    WordPress Slider & Popup Builder by Depicter plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 0%

    averta · depicter sliderAug 12, 2024

  • CVE-2024-43152
    24Monitor

    WordPress 3D FlipBook plugin <= 1.15.6 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    3dflipbook · 3d flipbookAug 12, 2024

  • CVE-2024-37219
    21Monitor

    WordPress Page Builder Sandwich plugin <= 5.1.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    pagebuildersandwich · page builder sandwichJul 22, 2024

  • CVE-2024-37956
    21Monitor

    WordPress VK All in One Expansion Unit plugin <= 9.99.1.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    vektor-inc · vk all in one expansion unitJul 20, 2024

  • CVE-2024-35777
    14Monitor

    WordPress WooCommerce plugin <= 8.9.2 - Content Injection vulnerability

    LowCVSS 3.5No exploitEPSS 0%

    automattic · woocommerceJul 9, 2024

  • CVE-2024-35728
    21Monitor

    WordPress Product Addons & Fields for WooCommerce plugin <= 32.0.20 - Content Injection vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    themeisle · product addons \& fields for woocommerceJun 10, 2024

  • CVE-2024-35675
    21Monitor

    WordPress Advanced Woo Labels plugin <= 1.93 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    advanced-woo-labels · advanced woo labelsJun 8, 2024

  • CVE-2024-35751
    19Monitor

    WordPress Woody code snippets plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 0%

    cm-wp · woody code snippetsJun 8, 2024

  • CVE-2024-34573
    26Monitor

    WordPress Pootle Pagebuilder plugin <= 5.7.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    pootlepress · pootle pagebuilder – wordpress page builderMay 8, 2024

  • CVE-2024-32957
    18Monitor

    WordPress Page Builder: Live Composer plugin <= 1.5.38 - Broken Access Control vulnerability

    MediumCVSS 4.7No exploitEPSS 0%

    live composer team · page builder: live composerApr 26, 2024

  • CVE-2024-32540
    23Monitor

    WordPress Fixed HTML Toolbar plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    web357 · fixed html toolbarApr 17, 2024

  • CVE-2024-32429
    19Monitor

    WordPress Remove Footer Credit plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 0%

    wpchill · remove footer creditApr 15, 2024

  • CVE-2024-30442
    21Monitor

    WordPress Bold Page Builder plugin <= 4.8.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    bold-themes · bold page builderMar 29, 2024

  • CVE-2024-30444
    23Monitor

    WordPress WordPress Page Builder – Zion Builder plugin <= 3.6.9 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    zionbuilder.io · wordpress page builder – zion builderMar 29, 2024

  • CVE-2024-29768
    23Monitor

    WordPress Astra theme <= 4.6.4 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    brainstorm force · astraMar 27, 2024

  • CVE-2024-2888
    21Monitor

    WordPress Post and Page Builder by BoldGrid plugin <= 1.26.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    boldgrid · post and page builderMar 26, 2024

  • CVE-2024-24865
    21Monitor

    WordPress Scroll Triggered Box Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    noahkagan · scroll triggered boxFeb 5, 2024