Skip to content
Noroxi

Vlad Vector (Patchstack)

20 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers
  • CVE-2022-45082
    19Monitor

    WordPress Accordions plugin <= 2.0.3 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities

    MediumCVSS 4.8No exploitEPSS 0%

    oxilab · accordionsNov 18, 2022

  • CVE-2022-44740
    35Monitor

    WordPress Creative Mail plugin <= 1.5.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

    HighCVSS 8.8No exploitEPSS 0%

    constantcontact · creative mailNov 18, 2022

  • CVE-2022-42459
    28Monitor

    WordPress Image Hover Effects Ultimate plugin <= 9.7.1 - Auth. WordPress Options Change vulnerability

    HighCVSS 7.2No exploitEPSS 1%

    oxilab · image hover effects ultimateNov 18, 2022

  • CVE-2022-40695
    35Monitor

    WordPress SEO Redirection Plugin plugin <= 8.9 - Multiple Cross-Site Scripting (CSRF) vulnerabilities

    HighCVSS 8.8No exploitEPSS 0%

    clogica · seo redirectionNov 18, 2022

  • CVE-2021-36905
    21Monitor

    WordPress Quiz And Survey Master plugin <= 7.3.4 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities

    MediumCVSS 5.4No exploitEPSS 0%

    expresstech · quiz and survey masterNov 17, 2022

  • CVE-2021-36906
    35Monitor

    WordPress Quiz And Survey Master plugin <= 7.3.6 - Multiple Insecure direct object references (IDOR) vulnerabilities

    HighCVSS 8.8No exploitEPSS 1%

    expresstech · quiz and survey masterNov 3, 2022

  • CVE-2021-36898
    28Monitor

    WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. SQL Injection (SQLi) vulnerability

    HighCVSS 7.2No exploitEPSS 1%

    expresstech · quiz and survey masterOct 28, 2022

  • CVE-2022-40311
    19Monitor

    WordPress Analytics Cat plugin <= 1.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 0%

    fatcatapps · analytics catOct 21, 2022

  • CVE-2022-38104
    28Monitor

    WordPress Accordions plugin <= 2.0.3 - Auth. WordPress Options Change vulnerability

    HighCVSS 7.2No exploitEPSS 1%

    oxilab · accordionsOct 21, 2022

  • CVE-2022-40215
    21Monitor

    WordPress Tabs plugin <= 3.7.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

    MediumCVSS 5.4No exploitEPSS 1%

    tabs project · tabsSep 23, 2022

  • CVE-2022-40217
    28Monitor

    WordPress WPide plugin <= 2.6 - Authenticated Arbitrary File Edit/Upload vulnerability

    HighCVSS 7.2No exploitEPSS 1%

    xplodedthemes · wpideSep 21, 2022

  • CVE-2022-38073
    21Monitor

    WordPress Awesome Support plugin <= 6.0.7 - Multiple Authenticated Persistent XSS (Additional Interested Parties)

    MediumCVSS 5.4No exploitEPSS 1%

    getawesomesupport · awesome supportSep 21, 2022

  • CVE-2022-36390
    21Monitor

    WordPress Event Calendar – Calendar plugin <= 1.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 1%

    total-soft · event calendarSep 21, 2022

  • CVE-2022-36383
    21Monitor

    WordPress Word Search Puzzles game plugin <= 2.0.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

    MediumCVSS 5.4No exploitEPSS 1%

    webhelpagency · wha wordsearchSep 21, 2022

  • CVE-2022-36365
    21Monitor

    WordPress WHA Crossword plugin <= 1.1.10 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

    MediumCVSS 5.4No exploitEPSS 1%

    webhelpagency · wha crosswordSep 21, 2022

  • CVE-2022-36389
    35Monitor

    WordPress Better Messages plugin <= 1.9.9.148 - Cross-Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    wordplus · better messagesAug 23, 2022

  • CVE-2022-36288
    35Monitor

    WordPress Download Manager plugin <= 3.2.48 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

    HighCVSS 8.8No exploitEPSS 0%

    w3eden · download managerAug 23, 2022

  • CVE-2022-34658
    21Monitor

    WordPress Download Manager plugin <= 3.2.48 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

    MediumCVSS 5.4No exploitEPSS 1%

    w3eden · download managerAug 23, 2022

  • CVE-2022-34857
    24Monitor

    WordPress SP Project & Document Manager plugin <= 4.59 - Reflected Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 1%

    smartypantsplugins · sp project \& document managerAug 22, 2022

  • CVE-2022-36284
    26Monitor

    WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change

    MediumCVSS 6.5No exploitEPSS 1%

    storeapps · affiliate for woocommerceAug 5, 2022