Skip to content
Noroxi

stealthcopter (Patchstack Alliance)

84 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers
  • CVE-2025-26892
    39Monitor

    WordPress Celestial Aura plugin <= 2.2 - Arbitrary File Upload vulnerability

    CriticalCVSS 9.9Proof of conceptEPSS 1%

    dkszone · celestial auraMay 19, 2025

  • CVE-2025-26872
    39Monitor

    WordPress Eximius theme <= 2.2 - Arbitrary File Upload vulnerability

    CriticalCVSS 9.9No exploitEPSS 1%

    dkszone · eximiusMay 19, 2025

  • CVE-2025-31419
    26Monitor

    WordPress Churel plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    themeix · churelMar 31, 2025

  • CVE-2025-22278
    26Monitor

    WordPress Whitish Lite theme <= 2.1.13 - Stored Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    yudleethemes · whitish liteMar 27, 2025

  • CVE-2025-26737
    26Monitor

    WordPress City Store theme <= 1.4.5 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    yudleethemes · city storeMar 27, 2025

  • CVE-2025-26869
    26Monitor

    WordPress Build theme <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    Mar 26, 2025

  • CVE-2025-26747
    26Monitor

    WordPress RainbowNews theme <= 1.0.7 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    99colorthemes · rainbownewsMar 26, 2025

  • CVE-2025-22769
    26Monitor

    WordPress Multifox theme <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    creative brahma · multifoxJan 15, 2025

  • CVE-2025-22354
    26Monitor

    WordPress Digi Store theme <= 1.1.4 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    code themes · digi storeJan 7, 2025

  • CVE-2024-50478
    39Monitor

    WordPress 1-Click Login: Passwordless Authentication plugin 1.4.5 - Broken Authentication vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    swoopnow · 1-click login\Oct 28, 2024

  • CVE-2024-43995
    21Monitor

    WordPress Posterity theme <= 3.6 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    sktthemes · posteritySep 17, 2024

  • CVE-2024-43994
    21Monitor

    WordPress Kahuna theme <= 1.7.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    cryoutcreations · kahunaSep 17, 2024

  • CVE-2024-43993
    21Monitor

    WordPress Liquido theme <= 1.0.1.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    cryoutcreations · liquidoSep 17, 2024

  • CVE-2024-43991
    21Monitor

    WordPress Hotel Galaxy theme <= 4.4.24 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    webdzier · hotel galaxySep 17, 2024

  • CVE-2024-43988
    21Monitor

    WordPress Mystique theme <= 2.5.7 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    digitalnature · mystiqueSep 17, 2024

  • CVE-2024-43987
    21Monitor

    WordPress Sliding Door theme <= 3.6 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    wayneconnor · sliding doorSep 17, 2024

  • CVE-2024-44058
    21Monitor

    WordPress Parabola theme <= 2.4.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    cryoutcreations · parabolaSep 15, 2024

  • CVE-2024-44057
    21Monitor

    WordPress Nirvana theme <= 1.6.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    cryoutcreations · nirvanaSep 15, 2024

  • CVE-2024-44056
    21Monitor

    WordPress Mantra theme <= 3.3.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    cryoutcreations · mantraSep 15, 2024

  • CVE-2024-44054
    21Monitor

    WordPress Fluida theme <= 1.8.8 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    cryoutcreations · fluidaSep 15, 2024

  • CVE-2024-43952
    21Monitor

    WordPress Esotera theme <= 1.2.5.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    cryoutcreations · esoteraAug 29, 2024

  • CVE-2024-43951
    21Monitor

    WordPress Tempera theme <= 1.8.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    cryoutcreations · temperaAug 29, 2024

  • CVE-2024-43236
    18Monitor

    WordPress Easy PayPal & Stripe Buy Now Button plugin <= 1.9 - Open Redirection vulnerability

    MediumCVSS 4.7No exploitEPSS 0%

    scott paterson · easy paypal buy now buttonAug 19, 2024

  • CVE-2024-43263
    26Monitor

    WordPress Visual Composer Starter theme <= 3.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    visual composer · visual composer starterAug 18, 2024

  • CVE-2024-43262
    26Monitor

    WordPress Busiprof theme <= 2.4.8 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    webriti · busiprofAug 18, 2024