Skip to content
Noroxi

vgo0

248 credited records · 2 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for vgo0

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits every 10 minutes on paid plans, on the hour on the free plan.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • CVE alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools, at most 30 a day (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-0912
    35Monitor

    Toret Manager <= 1.2.7 - Authenticated (Subscriber+) Arbitrary Options Update via AJAX actions

    HighCVSS 8.8No exploitEPSS 0%

    toret · toret managerFeb 19, 2026

  • CVE-2025-15521
    39Monitor

    Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeover

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    kodezen · academy lms – wordpress lms plugin for complete elearning solutionJan 20, 2026

  • CVE-2025-10146
    24Monitor

    Download Manager <= 3.3.23 - Reflected Cross-Site Scripting via `user_ids` Parameter

    MediumCVSS 6.1No exploitEPSS 0%

    codename065 · download managerSep 19, 2025

  • CVE-2025-7341
    39Monitor

    HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletion

    CriticalCVSS 9.8No exploitEPSS 1%

    hasthemes · download contact form 7 widget for elementor page builder \& gutenberg blocksJul 15, 2025

  • CVE-2025-7340
    41Plan

    HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload

    CriticalCVSS 9.8Proof of conceptEPSS 5%

    hasthemes · download contact form 7 widget for elementor page builder \& gutenberg blocksJul 15, 2025

  • CVE-2025-1309
    35Monitor

    UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.04 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

    HighCVSS 8.8No exploitEPSS 0%

    admintwentytwenty · uipress lite | effortless custom dashboards, admin themes and pagesMar 7, 2025

  • CVE-2024-9212
    24Monitor

    SKU Generator for WooCommerce <= 1.6.2 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    wpwham · sku generator for woocommerceMar 1, 2025

  • CVE-2025-1511
    24Monitor

    User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.0.4 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    wpeverest · user registrationFeb 28, 2025

  • CVE-2025-1505
    24Monitor

    Advanced AJAX Product Filters <= 1.6.8.1 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    berocket · advanced ajax product filtersFeb 28, 2025

  • CVE-2024-12339
    24Monitor

    Digihood HTML Sitemap <= 3.1.1 - Reflected Cross-Site Scripting via 'channel'

    MediumCVSS 6.1No exploitEPSS 0%

    digihood · digihood html sitemapFeb 19, 2025

  • CVE-2024-11376
    24Monitor

    s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions <= 241216 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    clavaque · s2memberFeb 18, 2025

  • CVE-2024-12320
    24Monitor

    Team Rosters <= 4.7 - Reflected Cross-Site Scripting via 'tab'

    MediumCVSS 6.1No exploitEPSS 0%

    shoalsummitsolutions · team rostersJan 30, 2025

  • CVE-2024-12299
    24Monitor

    System Dashboard <= 2.8.17 - Reflected Cross-Site Scripting via Filename Parameter

    MediumCVSS 6.1No exploitEPSS 0%

    bowo · system dashboardJan 30, 2025

  • CVE-2024-12177
    24Monitor

    Ai Image Alt Text Generator for WP <= 1.0.6 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    wpmessiah · ai image alt text generator for wpJan 30, 2025

  • CVE-2024-12409
    24Monitor

    Simple:Press Forum <= 6.10.11 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    simplepress · simplepressJan 30, 2025

  • CVE-2024-12334
    24Monitor

    WC Affiliate – A Complete WooCommerce Affiliate Plugin <= 2.4 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    codexpert · wc affiliateJan 26, 2025

  • CVE-2024-12076
    24Monitor

    Target Video Easy Publish <= 3.8.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    nebojsadabic · target video easy publishJan 25, 2025

  • CVE-2024-12005
    24Monitor

    WP-BibTeX <= 3.0.1 - Cross-Site Request Forgery to Stored and Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    infinitescript · wp-bibtexJan 21, 2025

  • CVE-2024-12385
    24Monitor

    WP Abstracts <= 2.7.2 - Cross-Site Request Forgery to Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    kevonadonis · wp abstractsJan 18, 2025

  • CVE-2024-12466
    24Monitor

    Proofreading <= 1.2.1.1 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    scribit · proofreadingJan 17, 2025

  • CVE-2024-12423
    24Monitor

    Contact Form 7 Redirect & Thank You Page <= 1.0.7 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    scottpaterson · business essentials for contact form 7Jan 15, 2025

  • CVE-2024-12403
    24Monitor

    Image Gallery – Responsive Photo Gallery <= 1.0.5 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    realwebcare · awesome responsive photo gallery – image & video lightbox galleryJan 15, 2025

  • CVE-2024-12412
    24Monitor

    Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently | WordPress plugin <= 2.2.1 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    magepeopleteam · booking and rental manager for bike | car | resort | appointment | dress | equipmentJan 11, 2025

  • CVE-2024-12407
    24Monitor

    Push Notification for Post and BuddyPress <= 2.07 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    murali-indiacitys · push notification for post and buddypressJan 11, 2025

  • CVE-2024-11327
    24Monitor

    ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    flowdee · clickwhaleJan 10, 2025