Skip to content
Noroxi

she11f

Patchstack Bug Bounty Program

22 credited records · 22 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for she11f

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-62118
    29Monitor

    WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - Broken Access Control vulnerability

    HighCVSS 7.3No exploitEPSS 0%

    dmitry v. · barcode scanner with inventory & order managerOct 10, 2026

  • CVE-2026-62117
    34Monitor

    WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - SQL Injection vulnerability

    HighCVSS 8.5No exploitEPSS 0%

    dmitry v. · barcode scanner with inventory & order managerOct 10, 2026

  • CVE-2026-84847
    30Monitor

    WordPress Quick Event Manager plugin <= 9.17 - Broken Access Control vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    brightvesseldev · quick event managerSep 3, 2026

  • CVE-2026-81280
    26Monitor

    WordPress Print Barcode Labels for your WooCommerce products/orders plugin <= 4.0.0 - Sensitive Data Exposure vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    ukr solution · print barcode labels for your woocommerce products/ordersAug 31, 2026

  • CVE-2026-65570
    32Monitor

    WordPress Login with phone number plugin <= 1.8.70 - Bypass vulnerability vulnerability

    HighCVSS 8.1No exploitEPSS 0%

    hamid alinia · login with phone numberAug 6, 2026

  • CVE-2026-15052
    28Monitor

    MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder <= 4.3.3 - Unauthenticated Stored Cross-Site Scripting via Form Field Values

    HighCVSS 7.2No exploitEPSS 0%

    umarbajwa · mailchimp subscribe form, optin builder, popup builder, form builderAug 1, 2026

  • CVE-2026-14234
    28Monitor

    WOLF - WordPress Posts Bulk Editor and Manager < 1.1.0 - Stored XSS via CSRF

    HighCVSS 7.1No exploitEPSS 0%

    unknown · wolfJul 29, 2026

  • CVE-2026-57698
    26Monitor

    WordPress Abandoned Cart Recovery for WooCommerce plugin <= 1.1.12 - Broken Authentication vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    villatheme · abandoned cart recovery for woocommerceJul 13, 2026

  • CVE-2026-57418
    26Monitor

    WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.13 - Broken Access Control vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    boldgrid · client invoicing by sprout invoicesJul 13, 2026

  • CVE-2026-57389
    34Monitor

    WordPress Groundhogg plugin <= 4.4.1 - Arbitrary File Deletion vulnerability

    HighCVSS 8.6No exploitEPSS 0%

    adrian tobey · groundhoggJul 13, 2026

  • CVE-2026-57372
    28Monitor

    WordPress WPJAM Basic plugin <= 7.0 - Server Side Request Forgery (SSRF) vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    denishua · wpjam basicJul 13, 2026

  • CVE-2026-11581
    23Monitor

    Kali Forms < 2.4.13 - Contributor+ Stored XSS via Form Field Caption

    MediumCVSS 5.9No exploitEPSS 0%

    unknown · kali forms — contact form & drag-and-drop builderJun 30, 2026

  • CVE-2026-57328
    26Monitor

    WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    strategy11 team · business directoryJun 29, 2026

  • CVE-2026-54821
    29Monitor

    WordPress Visual Link Preview plugin <= 2.3.1 - Sensitive Data Exposure vulnerability

    HighCVSS 7.4No exploitEPSS 0%

    bootstrapped ventures · visual link previewJun 25, 2026

  • CVE-2026-48885
    28Monitor

    WordPress HollerBox plugin <= 2.3.10.1 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    groundhogg · hollerboxJun 15, 2026

  • CVE-2026-52704
    40Plan

    WordPress WooCommerce PDF Invoice Builder plugin <= 2.0.8 - Remote Code Execution (RCE) vulnerability

    CriticalCVSS 10.0No exploitEPSS 0%

    edgar rojas · woocommerce pdf invoice builderJun 15, 2026

  • CVE-2026-9848
    31Monitor

    WP Ticket <= 6.0.4 - Unauthenticated SQL Injection via WordPress Search 's' Parameter

    HighCVSS 7.5Proof of conceptEPSS 2%

    emarket-design · customer support ticket system & helpdeskJun 12, 2026

  • CVE-2026-42746
    29Monitor

    WordPress Smart Online Order for Clover plugin <= 1.6.0 - Sensitive Data Exposure vulnerability

    HighCVSS 7.3No exploitEPSS 0%

    zaytech · smart online order for cloverMay 27, 2026

  • CVE-2026-42745
    29Monitor

    WordPress Smart Online Order for Clover plugin <= 1.6.0 - Broken Authentication vulnerability

    HighCVSS 7.3No exploitEPSS 0%

    zaytech · smart online order for cloverMay 27, 2026

  • CVE-2026-42738
    28Monitor

    WordPress Smart Online Order for Clover plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    zaytech · smart online order for cloverMay 27, 2026

  • CVE-2026-42734
    28Monitor

    WordPress Geo Mashup plugin <= 1.13.19 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    dylan kuhn · geo mashupMay 27, 2026

  • CVE-2026-42726
    26Monitor

    WordPress AWP Classifieds plugin <= 4.4.5 - Broken Access Control vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    strategy11 team · awp classifiedsMay 27, 2026