Skip to content
Noroxi

testoun

Patchstack Bug Bounty Program

11 credited records · 11 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for testoun

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-17005
    27Monitor

    Horizontal Scrolling Announcements <= 2.6 - Contributor+ Stored XSS via Style Field

    MediumCVSS 6.8No exploitEPSS 0%

    unknown · horizontal scrolling announcementsOct 4, 2026

  • CVE-2026-15253
    27Monitor

    Easy Media Replace <= 0.2.0 - Author+ Stored XSS via Attachment Title

    MediumCVSS 6.8Proof of conceptEPSS 0%

    unknown · easy media replaceAug 19, 2026

  • CVE-2026-19794
    28Monitor

    WP-Stats <= 2.56 - Unauthenticated Stored Cross-Site Scripting

    HighCVSS 7.2Proof of conceptEPSS 0%

    gamerz · wp-statsAug 14, 2026

  • CVE-2026-14290
    27Monitor

    Embed Google Photos Album Easily <= 2.2.1 - Contributor+ Stored XSS via link Shortcode Attribute

    MediumCVSS 6.8Proof of conceptEPSS 0%

    unknown · embed google photos albumAug 14, 2026

  • CVE-2026-66426
    28Monitor

    WordPress WP-Stats plugin <= 2.56 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    lester chan · wp-statsAug 13, 2026

  • CVE-2026-15249
    21Monitor

    Patterns Kit <= 1.0.3 - Contributor+ Stored XSS via YouTube Popup Link

    MediumCVSS 5.4No exploitEPSS 0%

    unknown · patterns kitAug 12, 2026

  • CVE-2026-17010
    21Monitor

    Saitama Addon Pack <= 1.0.8 - Contributor+ Stored XSS via Post Meta

    MediumCVSS 5.4No exploitEPSS 0%

    unknown · saitama addon packAug 10, 2026

  • CVE-2026-15245
    21Monitor

    BNE Testimonials < 2.0.8.2 - Contributor+ Stored XSS via Slider Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    unknown · bne testimonialsAug 7, 2026

  • CVE-2026-16537
    21Monitor

    Slick Slider < 0.5.3 - Contributor+ Stored XSS via Gallery Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    unknown · slick sliderAug 6, 2026

  • CVE-2026-15234
    21Monitor

    Codeless Page Builder <= 1.1.4 - Contributor+ Stored XSS via Shortcode Attribute

    MediumCVSS 5.4No exploitEPSS 0%

    unknown · codeless page builderAug 1, 2026

  • CVE-2026-65540
    28Monitor

    WordPress Popup for CF7 with Sweet Alert plugin <= 1.6.5 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 7.1Proof of conceptEPSS 0%

    metin saraç · popup for cf7 with sweet alertJul 23, 2026