VulDB GitHub Commit Analyzer
508 credited records · 13 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2005-10002No exploit | almosteffortless secure-files Plugin secure-files.php sf_downloads path traversalwp-plugins · secure files · CWE-22 | Critical9.8 | — | 0.7% | Oct 29, 2023 |
24Monitor | CVE-2023-5835No exploit | hu60t hu60wap6 ubbparser.php markdown cross site scriptinghu60 · hu60wap6 · CWE-79 | Medium6.1 | — | 0.3% | Oct 28, 2023 |
30Monitor | CVE-2012-10016No exploit | Halulu simple-download-button-shortcode Plugin Download simple-download-button_dl.php information disclosurehalulu · simple-download-button-shortcode · CWE-200 | High7.5 | — | 0.7% | Oct 16, 2023 |
39Monitor | CVE-2011-10004No exploit | reciply Plugin uploadImage.php unrestricted uploadreciply project · reciply · CWE-434 | Critical9.8 | — | 0.7% | Oct 16, 2023 |
21Monitor | CVE-2023-5588No exploit | kphrx pleroma pack.ex Pleroma.Emoji.Pack path traversalkpherox · pleroma · CWE-22 | Medium5.3 | — | 0.7% | Oct 15, 2023 |
39Monitor | CVE-2015-10126No exploit | Easy2Map Photos Plugin sql injectionsteven ellis · easy2map photos · CWE-89 | Critical9.8 | — | 0.6% | Oct 6, 2023 |
35Monitor | CVE-2015-10125No exploit | WP Ultimate CSV Importer Plugin cross-site request forgerysmackcoders · import all pages\, post types\, products\, orders\, and users as xml \& csv · CWE-352 | High8.8 | — | 0.4% | Oct 5, 2023 |
39Monitor | CVE-2015-10124No exploit | Most Popular Posts Widget Plugin functions.php show_views sql injectionsmartfan · most popular posts widget · CWE-89 | Critical9.8 | — | 0.7% | Oct 2, 2023 |
21Monitor | CVE-2018-25089No exploit | glb Meetup Tag Extension Link Attribute reverse tabnabbingglb · meetup tag · CWE-1022 | Medium5.3 | — | 0.6% | Aug 28, 2023 |
24Monitor | CVE-2016-15035No exploit | Doc2k RE-Chat re_chat.js cross site scriptingdoc2k · re-chat · CWE-79 | Medium6.1 | — | 0.4% | Aug 28, 2023 |
35Monitor | CVE-2021-4428Proof of concept | what3words Autosuggest Plugin Setting class-w3w-autosuggest-public.php enqueue_scripts information disclosurewhat3words · autosuggest · CWE-200 | High7.5 | — | 15.8% | Jul 18, 2023 |
40Plan | CVE-2020-36762Proof of concept | ONS Digital RAS Collection Instrument comment.yml jobs os command injectionons · ras collection instrument · CWE-78 | Critical9.8 | — | 2.3% | Jul 18, 2023 |
39Monitor | CVE-2018-25088No exploit | Blue Yonder postgraas_server PostgreSQL Backend postgres_cluster_driver.py create_postgres_db sql injectionblueyonder · postgraas server · CWE-89 | Critical9.8 | — | 0.7% | Jul 18, 2023 |
39Monitor | CVE-2015-10122No exploit | wp-donate Plugin donate-display.php sql injectionwp donate project · wp donate · CWE-89 | Critical9.8 | — | 1.0% | Jul 18, 2023 |
30Monitor | CVE-2022-4952No exploit | OmniSharp csharp-language-server-protocol JSON Serializer SerializerBase.cs CreateSerializerSettings resource consumptiondotnetfoundation · c\# language server protocol · CWE-400 | High7.5 | — | 0.8% | Jul 16, 2023 |
39Monitor | CVE-2016-15034No exploit | Dynacase Webdesk freedomrss_search.php freedomrss_search sql injectionanakeen · dynacase webdesk · CWE-89 | Critical9.8 | — | 0.6% | Jul 10, 2023 |
24Monitor | CVE-2015-10121No exploit | Beeliked Microsite Plugin beelikedmicrosite.php embed_handler cross site scriptingbeeliked · beeliked · CWE-79 | Medium6.1 | — | 0.5% | Jul 10, 2023 |
24Monitor | CVE-2015-10120No exploit | WDS Multisite Aggregate Plugin WDS_Multisite_Aggregate_Options.php update_options cross site scriptingwebdevstudios · wds multisite aggregate · CWE-79 | Medium6.1 | — | 0.5% | Jul 10, 2023 |
24Monitor | CVE-2015-10119No exploit | View All Posts Page Plugin view-all-posts-pages.php action_admin_notices_activation cross site scriptingoomphinc · view all post\'s pages · CWE-79 | Medium6.1 | — | 0.5% | Jul 10, 2023 |
24Monitor | CVE-2015-10118No exploit | cchetanonline WP-CopyProtect wp-copyprotect.php CopyProtect_options_page cross site scriptingwp-copyprotect project · wp-copyprotect · CWE-79 | Medium6.1 | — | 0.4% | Jun 12, 2023 |
30Monitor | CVE-2018-25087No exploit | Arborator Server project.cgi start denial of servicearborator server project · arborator server · CWE-404 | High7.5 | — | 0.9% | Jun 5, 2023 |
24Monitor | CVE-2017-20185No exploit | Fuzzy SWMP GET Parameter swmp.php cross site scriptingserver web monitor page project · server web monitor page · CWE-79 | Medium6.1 | — | 0.4% | Jun 5, 2023 |
24Monitor | CVE-2015-10117No exploit | Gravity Forms DPS PxPay Plugin cross site scriptingwebaware · gf windcave free · CWE-79 | Medium6.1 | — | 0.6% | Jun 5, 2023 |
35Monitor | CVE-2015-10116No exploit | RealFaviconGenerator Favicon Plugin class-favicon-by-realfavicongenerator-admin.php install_new_favicon cross-site request forgeryrealfavicongenerator · favicon by realfavicongenerator · CWE-352 | High8.8 | — | 0.4% | Jun 5, 2023 |
30Monitor | CVE-2013-10030No exploit | Exit Box Lite Plugin wordpress-exit-box-lite.php information disclosureangrybyte · wordpress exit box lite · CWE-200 | High7.5 | — | 0.7% | Jun 5, 2023 |
- CVE-2005-1000239Monitor
almosteffortless secure-files Plugin secure-files.php sf_downloads path traversal
CriticalCVSS 9.8No exploitEPSS 0%wp-plugins · secure filesOct 29, 2023
- CVE-2023-583524Monitor
hu60t hu60wap6 ubbparser.php markdown cross site scripting
MediumCVSS 6.1No exploitEPSS 0%hu60 · hu60wap6Oct 28, 2023
- CVE-2012-1001630Monitor
Halulu simple-download-button-shortcode Plugin Download simple-download-button_dl.php information disclosure
HighCVSS 7.5No exploitEPSS 0%halulu · simple-download-button-shortcodeOct 16, 2023
- CVE-2011-1000439Monitor
reciply Plugin uploadImage.php unrestricted upload
CriticalCVSS 9.8No exploitEPSS 0%reciply project · reciplyOct 16, 2023
- CVE-2023-558821Monitor
kphrx pleroma pack.ex Pleroma.Emoji.Pack path traversal
MediumCVSS 5.3No exploitEPSS 0%kpherox · pleromaOct 15, 2023
- CVE-2015-1012639Monitor
Easy2Map Photos Plugin sql injection
CriticalCVSS 9.8No exploitEPSS 0%steven ellis · easy2map photosOct 6, 2023
- CVE-2015-1012535Monitor
WP Ultimate CSV Importer Plugin cross-site request forgery
HighCVSS 8.8No exploitEPSS 0%smackcoders · import all pages\, post types\, products\, orders\, and users as xml \& csvOct 5, 2023
- CVE-2015-1012439Monitor
Most Popular Posts Widget Plugin functions.php show_views sql injection
CriticalCVSS 9.8No exploitEPSS 0%smartfan · most popular posts widgetOct 2, 2023
- CVE-2018-2508921Monitor
glb Meetup Tag Extension Link Attribute reverse tabnabbing
MediumCVSS 5.3No exploitEPSS 0%glb · meetup tagAug 28, 2023
- CVE-2016-1503524Monitor
Doc2k RE-Chat re_chat.js cross site scripting
MediumCVSS 6.1No exploitEPSS 0%doc2k · re-chatAug 28, 2023
- CVE-2021-442835Monitor
what3words Autosuggest Plugin Setting class-w3w-autosuggest-public.php enqueue_scripts information disclosure
HighCVSS 7.5Proof of conceptEPSS 15%what3words · autosuggestJul 18, 2023
- CVE-2020-3676240Plan
ONS Digital RAS Collection Instrument comment.yml jobs os command injection
CriticalCVSS 9.8Proof of conceptEPSS 2%ons · ras collection instrumentJul 18, 2023
- CVE-2018-2508839Monitor
Blue Yonder postgraas_server PostgreSQL Backend postgres_cluster_driver.py create_postgres_db sql injection
CriticalCVSS 9.8No exploitEPSS 0%blueyonder · postgraas serverJul 18, 2023
- CVE-2015-1012239Monitor
wp-donate Plugin donate-display.php sql injection
CriticalCVSS 9.8No exploitEPSS 1%wp donate project · wp donateJul 18, 2023
- CVE-2022-495230Monitor
OmniSharp csharp-language-server-protocol JSON Serializer SerializerBase.cs CreateSerializerSettings resource consumption
HighCVSS 7.5No exploitEPSS 0%dotnetfoundation · c\# language server protocolJul 16, 2023
- CVE-2016-1503439Monitor
Dynacase Webdesk freedomrss_search.php freedomrss_search sql injection
CriticalCVSS 9.8No exploitEPSS 0%anakeen · dynacase webdeskJul 10, 2023
- CVE-2015-1012124Monitor
Beeliked Microsite Plugin beelikedmicrosite.php embed_handler cross site scripting
MediumCVSS 6.1No exploitEPSS 0%beeliked · beelikedJul 10, 2023
- CVE-2015-1012024Monitor
WDS Multisite Aggregate Plugin WDS_Multisite_Aggregate_Options.php update_options cross site scripting
MediumCVSS 6.1No exploitEPSS 0%webdevstudios · wds multisite aggregateJul 10, 2023
- CVE-2015-1011924Monitor
View All Posts Page Plugin view-all-posts-pages.php action_admin_notices_activation cross site scripting
MediumCVSS 6.1No exploitEPSS 0%oomphinc · view all post\'s pagesJul 10, 2023
- CVE-2015-1011824Monitor
cchetanonline WP-CopyProtect wp-copyprotect.php CopyProtect_options_page cross site scripting
MediumCVSS 6.1No exploitEPSS 0%wp-copyprotect project · wp-copyprotectJun 12, 2023
- CVE-2018-2508730Monitor
Arborator Server project.cgi start denial of service
HighCVSS 7.5No exploitEPSS 0%arborator server project · arborator serverJun 5, 2023
- CVE-2017-2018524Monitor
Fuzzy SWMP GET Parameter swmp.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%server web monitor page project · server web monitor pageJun 5, 2023
- CVE-2015-1011724Monitor
Gravity Forms DPS PxPay Plugin cross site scripting
MediumCVSS 6.1No exploitEPSS 0%webaware · gf windcave freeJun 5, 2023
- CVE-2015-1011635Monitor
RealFaviconGenerator Favicon Plugin class-favicon-by-realfavicongenerator-admin.php install_new_favicon cross-site request forgery
HighCVSS 8.8No exploitEPSS 0%realfavicongenerator · favicon by realfavicongeneratorJun 5, 2023
- CVE-2013-1003030Monitor
Exit Box Lite Plugin wordpress-exit-box-lite.php information disclosure
HighCVSS 7.5No exploitEPSS 0%angrybyte · wordpress exit box liteJun 5, 2023