Skip to content
Noroxi

Sh

11 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Sh

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2024-0653
    19Monitor

    Custom Field Template <= 2.6.1 - Authenticated (Admin+) Stored Cross-Site Scritping

    MediumCVSS 4.8No exploitEPSS 0%

    wpgogo · custom field templateJun 10, 2024

  • CVE-2024-1571
    19Monitor

    WP Recipe Maker <= 9.2.1 - Authenticated Stored Cross-Site Scripting via Video Embed

    MediumCVSS 4.8No exploitEPSS 0%

    bootstrapped · wp recipe makerApr 9, 2024

  • CVE-2024-0662
    19Monitor

    The FancyBox for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions 3.0.2 to 3.3.3 d

    MediumCVSS 4.8No exploitEPSS 0%

    colorlib · fancyboxApr 9, 2024

  • CVE-2024-1987
    21Monitor

    WP-Members Membership Plugin <= 3.4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    butlerblog · wp-membersMar 8, 2024

  • CVE-2024-0689
    19Monitor

    Custom Field Suite <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting

    MediumCVSS 4.8No exploitEPSS 0%

    custom field suite project · custom field suiteFeb 28, 2024

  • CVE-2024-1586
    21Monitor

    Schema & Structured Data for WP & AMP <= 1.26 - Authenticated (Custom) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    magazine3 · schema \& structured data for wp \& ampFeb 28, 2024

  • CVE-2023-6806
    21Monitor

    Starbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Job Settings

    MediumCVSS 5.4No exploitEPSS 0%

    squirrly · starboxFeb 28, 2024

  • CVE-2024-0657
    19Monitor

    Internal Link Juicer <= 2.23.4 - Authenticated (Admin+) Stored Cross-Site Scripting

    MediumCVSS 4.8No exploitEPSS 0%

    internallinkjuicer · internal link juicerFeb 9, 2024

  • CVE-2024-0366
    17Monitor

    Starbox – the Author Box for Humans <= 3.4.7 - Insecure Direct Object Reference

    MediumCVSS 4.3No exploitEPSS 0%

    squirrly · starboxFeb 5, 2024

  • CVE-2024-0625
    19Monitor

    WPFront Notification Bar <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via wpfront-notification-bar-options[custom_class]

    MediumCVSS 4.8No exploitEPSS 0%

    wpfront · wpfront notification barJan 24, 2024

  • CVE-2024-0688
    19Monitor

    WebSub (FKA. PubSubHubbub) <= 3.1.4 - Authenticated (Admin+) Stored Cross-Site Scripting

    MediumCVSS 4.8No exploitEPSS 0%

    pubsubhubbub · websubJan 24, 2024