Skip to content
Noroxi

thiennv (Patchstack Alliance)

135 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for thiennv (Patchstack Alliance)

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2022-41995
    17Monitor

    WordPress Photo Gallery – Image Gallery by Ape Plugin <= 2.2.8 is vulnerable to Broken Access Control

    MediumCVSS 4.3No exploitEPSS 0%

    galleryape · gallery images apeJan 2, 2025

  • CVE-2023-46616
    21Monitor

    WordPress Draw Attention plugin <= 2.0.15 - Broken Access Control vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    nsquared · draw attentionJan 2, 2025

  • CVE-2023-46080
    17Monitor

    WordPress ApplyOnline – Application Form Builder and Manager plugin <= 2.5.3 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    farhan noor · applyonline – application form builder and managerJan 2, 2025

  • CVE-2023-45631
    21Monitor

    WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    wpdevart · galleryJan 2, 2025

  • CVE-2024-56015
    28Monitor

    WordPress Tidy Up Plugin <= 1.3 - CSRF to Reflected Cross-Site Scripting vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    john godley · tidy upDec 16, 2024

  • CVE-2023-41951
    17Monitor

    WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.6.14 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    rtcamp · rtmedia for wordpress, buddypress and bbpressDec 13, 2024

  • CVE-2023-41869
    17Monitor

    WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.4 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    alex volkov · wp accessibility helper (wah)Dec 13, 2024

  • CVE-2023-41857
    21Monitor

    WordPress Click To Tweet plugin <= 2.0.14 - Broken Access Control vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    clicktotweet.com · click to tweetDec 13, 2024

  • CVE-2023-41649
    26Monitor

    WordPress Ovic Product Bundle plugin <= 1.1.2 - Broken Access Control vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    ovic team · ovic product bundleDec 13, 2024

  • CVE-2023-36506
    21Monitor

    WordPress YITH WooCommerce Waitlist plugin <= 2.13.0 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    yith · yith woocommerce waiting listDec 13, 2024

  • CVE-2023-32520
    30Monitor

    WordPress WCP Contact Form plugin <= 3.1.0 - Broken Access Control vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    webcodin · wcp contact formDec 13, 2024

  • CVE-2023-32519
    17Monitor

    WordPress WCP Contact Form plugin <= 3.1.0 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    webcodin · wcp contact formDec 13, 2024

  • CVE-2022-47176
    17Monitor

    WordPress Depicter Slider plugin <= 1.9.0 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    averta · depicter sliderDec 13, 2024

  • CVE-2022-44578
    21Monitor

    WordPress Owl Carousel plugin <= 0.5.3 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    pierre jehan · owl carouselDec 13, 2024

  • CVE-2023-47830
    21Monitor

    WordPress Live Preview for Contact Form 7 plugin <= 1.2.0 - Broken Access Control vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    addons for contact form 7 · live preview for contact form 7Dec 9, 2024

  • CVE-2024-37560
    32Monitor

    WordPress WP User Switch plugin <= 1.1.0 - Privilege Escalation vulnerability

    HighCVSS 8.0No exploitEPSS 0%

    iqbalrony · wp user switchJul 12, 2024

  • CVE-2024-35770
    35Monitor

    WordPress Vimeography plugin <= 2.4.1 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    davekiss · vimeographyJun 21, 2024

  • CVE-2023-51516
    21Monitor

    WordPress Business Directory Plugin – Easy Listing Directories for WordPress plugin <= 6.3.9 - Broken Access Control vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    businessdirectoryplugin · business directoryJun 13, 2024

  • CVE-2023-37394
    21Monitor

    WordPress WP Dummy Content Generator plugin <= 2.3.0 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    wp dummy content generator project · wp dummy content generatorJun 13, 2024

  • CVE-2023-41240
    21Monitor

    WordPress Pricing Deals for WooCommercePricing Deals for WooCommerce plugin <= 2.0.3.2 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    varktech · pricing deals for woocommerceJun 12, 2024

  • CVE-2024-35671
    17Monitor

    WordPress MJ Update History plugin <= 1.0.4 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    minoji · mj update historyJun 11, 2024

  • CVE-2024-32727
    21Monitor

    WordPress RomethemeForm For Elementor plugin <= 1.1.2 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    rometheme · romethemeform for elementorJun 9, 2024

  • CVE-2024-32821
    17Monitor

    WordPress Total Poll Lite plugin <= 4.9.9 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    totalsuite · total poll liteJun 9, 2024

  • CVE-2024-33920
    21Monitor

    WordPress Democracy Poll plugin <= 6.0.3 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    kama · democracy pollMay 3, 2024

  • CVE-2024-33677
    17Monitor

    WordPress Contact Form 7 Extension For Mailchimp plugin <= 0.5.70 - Cross Site Request Forgery (CSRF) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    renzo johnson · contact form 7 extension for mailchimpApr 26, 2024