Skip to content
Noroxi

SOPROBRO (Patchstack Alliance)

15 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for SOPROBRO (Patchstack Alliance)

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2025-24749
    28Monitor

    WordPress EZPZ SAML SP Single Sign On (SSO) plugin <= 1.2.5 - CSRF to Stored XSS vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    overt software solutions ltd · ezpz saml sp single sign on (sso)Jan 31, 2025

  • CVE-2025-22706
    28Monitor

    WordPress Social Pug: Author Box plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    iova.mihai · social pug: author boxJan 21, 2025

  • CVE-2025-23907
    26Monitor

    WordPress SOCIAL.NINJA plugin <= 0.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    closed · social.ninjaJan 16, 2025

  • CVE-2025-23824
    26Monitor

    WordPress FontAwesome.io ShortCodes plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    alexander weleczka · fontawesome.io shortcodesJan 16, 2025

  • CVE-2025-23816
    26Monitor

    WordPress Metaphor Widgets plugin <= 2.4 - Stored Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    metaphorcreations · metaphor widgetsJan 16, 2025

  • CVE-2025-23815
    28Monitor

    WordPress root Cookie plugin <= 1.6 - CSRF to Stored XSS vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    linickx · root cookieJan 16, 2025

  • CVE-2025-23559
    28Monitor

    WordPress MemeOne plugin <= 2.0.5 - CSRF to Stored XSS vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    stepan stepasyuk · memeoneJan 16, 2025

  • CVE-2025-22724
    26Monitor

    WordPress Product Carousel For WooCommerce – WoorouSell plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    mojofywp · product carousel for woocommerce – woorousellJan 15, 2025

  • CVE-2024-54241
    26Monitor

    WordPress Elite Notification plugin 1.5 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    appsbd · elite notification – sales popup, social proof, fomo & woocommerce notificationDec 13, 2024

  • CVE-2024-53750
    28Monitor

    WordPress PayPal Responder plugin <= 1.2 - CSRF to Stored XSS vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    maeve lander · paypal responderDec 1, 2024

  • CVE-2024-51647
    28Monitor

    WordPress Featured Posts Scroll plugin <= 1.25 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    chaser324 · featured posts scrollNov 9, 2024

  • CVE-2024-50466
    35Monitor

    WordPress DarkMySite – Advanced Dark Mode Plugin for WordPress plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    darkmysite · darkmysiteOct 29, 2024

  • CVE-2024-49627
    35Monitor

    WordPress WordPress Image SEO plugin <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    noorsplugin · wordpress image seoOct 20, 2024

  • CVE-2024-47372
    23Monitor

    WordPress TNC PDF viewer plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    themencode llc · tnc pdf viewerOct 5, 2024

  • CVE-2024-43317
    24Monitor

    WordPress RegistrationMagic plugin <= 6.0.1.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    metagauss · registrationmagicAug 19, 2024