VulDB GitHub Commit Analyzer
508 credited records · 13 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2013-10029No exploit | Exit Box Lite Plugin wordpress-exit-box-lite.php exitboxadmin cross-site request forgeryangrybte · wordpress exit box lite · CWE-352 | High8.8 | — | 0.4% | Jun 5, 2023 |
24Monitor | CVE-2015-10115No exploit | WooSidebars Sidebar Manager Converter Plugin class-woosidebars-sbm-converter.php process_request redirectwoocommerce · sidebar manager to woosidebars converter · CWE-601 | Medium6.1 | — | 0.6% | Jun 5, 2023 |
24Monitor | CVE-2015-10114No exploit | WooSidebars Plugin class-woo-sidebars.php enable_custom_post_sidebars redirectwoocommerce · woosidebars · CWE-601 | Medium6.1 | — | 0.6% | Jun 5, 2023 |
24Monitor | CVE-2015-10113No exploit | WooFramework Tweaks Plugin wooframework-tweaks.php admin_screen_logic redirectwoocommerce · wooframework tweaks · CWE-601 | Medium6.1 | — | 0.4% | Jun 5, 2023 |
24Monitor | CVE-2015-10112No exploit | WooFramework Branding Plugin wooframework-branding.php admin_screen_logic redirectwoocommerce · wooframework branding · CWE-601 | Medium6.1 | — | 0.6% | Jun 5, 2023 |
24Monitor | CVE-2014-125105No exploit | Broken Link Checker Plugin Settings Page core.php options_page cross site scriptingmanagewp · broken link checker · CWE-79 | Medium6.1 | — | 0.5% | Jun 4, 2023 |
24Monitor | CVE-2013-10028No exploit | EELV Newsletter Plugin lettreinfo.php style_newsletter cross site scriptingeelv newsletter project · eelv newsletter · CWE-79 | Medium6.1 | — | 0.5% | Jun 4, 2023 |
35Monitor | CVE-2013-10027No exploit | Blogger Importer Plugin blogger-importer.php restart cross-site request forgerywordpress · blogger importer · CWE-352 | High8.8 | — | 0.4% | Jun 4, 2023 |
39Monitor | CVE-2015-10111No exploit | Watu Quiz Plugin Exam exam.php watu_exams sql injectionkibokolabs · watu quiz · CWE-89 | Critical9.8 | — | 0.7% | Jun 4, 2023 |
24Monitor | CVE-2023-3085No exploit | X-WRT luci 404 Error Template dispatcher.uc run_action cross site scriptingx-wrt · luci · CWE-79 | Medium6.1 | — | 0.4% | Jun 3, 2023 |
24Monitor | CVE-2016-15032No exploit | mback2k mh_httpbl Extension class.tx_mhhttpbl.php stopOutput cross site scriptingmh httpbl project · mh httpbl · CWE-79 | Medium6.1 | — | 0.5% | Jun 1, 2023 |
24Monitor | CVE-2015-10110No exploit | ruddernation TinyChat Room Spy Plugin room-spy.php wp_show_room_spy cross site scriptingtinychat · room spy · CWE-79 | Medium6.1 | — | 0.5% | Jun 1, 2023 |
35Monitor | CVE-2015-10109No exploit | Video Playlist and Gallery Plugin wp-media-cincopa.php cross-site request forgerycincopa · video and media plug-in · CWE-352 | High8.8 | — | 0.4% | Jun 1, 2023 |
39Monitor | CVE-2014-125104No exploit | VaultPress Plugin MailPoet Plugin class.vaultpress-hotfixes.php protect_aioseo_ajax unrestricted uploadautomattic · vaultpress · CWE-434 | Critical9.8 | — | 0.7% | Jun 1, 2023 |
24Monitor | CVE-2018-25086No exploit | sea75300 FanPress CM Template Preview templatepreview.php getArticlesPreview cross site scriptingfanpress cm project · fanpress cm · CWE-79 | Medium6.1 | — | 0.4% | Jun 1, 2023 |
35Monitor | CVE-2015-10108No exploit | meitar Inline Google Spreadsheet Viewer Plugin inline-gdocs-viewer.php displayShortcode cross-site request forgeryinline google spreadsheet viewer project · inline google spreadsheet viewer · CWE-352 | High8.8 | — | 0.4% | May 31, 2023 |
24Monitor | CVE-2015-10107No exploit | Simplr Registration Form Plus+ Plugin cross site scriptingsimplr registration form plus\+ project · simplr registration form plus\+ · CWE-79 | Medium6.1 | — | 0.5% | May 30, 2023 |
24Monitor | CVE-2014-125103No exploit | BestWebSoft Twitter Plugin twitter.php twttr_settings_page cross site scriptingbestwebsoft · twitter · CWE-79 | Medium6.1 | — | 0.5% | May 30, 2023 |
35Monitor | CVE-2012-10015No exploit | BestWebSoft Twitter Plugin Settings Page twitter.php twttr_settings_page cross-site request forgerybestwebsoft · twitter · CWE-352 | High8.8 | — | 0.4% | May 30, 2023 |
30Monitor | CVE-2014-125102No exploit | Bestwebsoft Relevant Plugin Thumbnail information disclosurebestwebsoft · relevant · CWE-200 | High7.5 | — | 0.6% | May 29, 2023 |
39Monitor | CVE-2021-4336No exploit | ITRS Group monitor-ninja scheduled_reports.php sql injectionitrsgroup · ninja · CWE-89 | Critical9.8 | — | 0.6% | May 28, 2023 |
39Monitor | CVE-2014-125101No exploit | Portfolio Gallery Plugin sql injectionhuge-it · portfolio gallery · CWE-89 | Critical9.8 | — | 0.7% | May 28, 2023 |
39Monitor | CVE-2016-15031No exploit | PHP-Login POST Parameter class.loginscript.php checkLogin sql injectionphp-login project · php-login · CWE-89 | Critical9.8 | — | 0.7% | May 5, 2023 |
24Monitor | CVE-2017-20183No exploit | External Media without Import Plugin external-media-without-import.php print_media_new_panel cross site scriptingexternal media without import project · external media without import · CWE-79 | Medium6.1 | — | 0.5% | May 4, 2023 |
24Monitor | CVE-2014-125100No exploit | BestWebSoft Job Board Plugin cross site scriptingbestwebsoft · job board · CWE-79 | Medium6.1 | — | 0.5% | May 1, 2023 |
- CVE-2013-1002935Monitor
Exit Box Lite Plugin wordpress-exit-box-lite.php exitboxadmin cross-site request forgery
HighCVSS 8.8No exploitEPSS 0%angrybte · wordpress exit box liteJun 5, 2023
- CVE-2015-1011524Monitor
WooSidebars Sidebar Manager Converter Plugin class-woosidebars-sbm-converter.php process_request redirect
MediumCVSS 6.1No exploitEPSS 0%woocommerce · sidebar manager to woosidebars converterJun 5, 2023
- CVE-2015-1011424Monitor
WooSidebars Plugin class-woo-sidebars.php enable_custom_post_sidebars redirect
MediumCVSS 6.1No exploitEPSS 0%woocommerce · woosidebarsJun 5, 2023
- CVE-2015-1011324Monitor
WooFramework Tweaks Plugin wooframework-tweaks.php admin_screen_logic redirect
MediumCVSS 6.1No exploitEPSS 0%woocommerce · wooframework tweaksJun 5, 2023
- CVE-2015-1011224Monitor
WooFramework Branding Plugin wooframework-branding.php admin_screen_logic redirect
MediumCVSS 6.1No exploitEPSS 0%woocommerce · wooframework brandingJun 5, 2023
- CVE-2014-12510524Monitor
Broken Link Checker Plugin Settings Page core.php options_page cross site scripting
MediumCVSS 6.1No exploitEPSS 0%managewp · broken link checkerJun 4, 2023
- CVE-2013-1002824Monitor
EELV Newsletter Plugin lettreinfo.php style_newsletter cross site scripting
MediumCVSS 6.1No exploitEPSS 0%eelv newsletter project · eelv newsletterJun 4, 2023
- CVE-2013-1002735Monitor
Blogger Importer Plugin blogger-importer.php restart cross-site request forgery
HighCVSS 8.8No exploitEPSS 0%wordpress · blogger importerJun 4, 2023
- CVE-2015-1011139Monitor
Watu Quiz Plugin Exam exam.php watu_exams sql injection
CriticalCVSS 9.8No exploitEPSS 0%kibokolabs · watu quizJun 4, 2023
- CVE-2023-308524Monitor
X-WRT luci 404 Error Template dispatcher.uc run_action cross site scripting
MediumCVSS 6.1No exploitEPSS 0%x-wrt · luciJun 3, 2023
- CVE-2016-1503224Monitor
mback2k mh_httpbl Extension class.tx_mhhttpbl.php stopOutput cross site scripting
MediumCVSS 6.1No exploitEPSS 0%mh httpbl project · mh httpblJun 1, 2023
- CVE-2015-1011024Monitor
ruddernation TinyChat Room Spy Plugin room-spy.php wp_show_room_spy cross site scripting
MediumCVSS 6.1No exploitEPSS 0%tinychat · room spyJun 1, 2023
- CVE-2015-1010935Monitor
Video Playlist and Gallery Plugin wp-media-cincopa.php cross-site request forgery
HighCVSS 8.8No exploitEPSS 0%cincopa · video and media plug-inJun 1, 2023
- CVE-2014-12510439Monitor
VaultPress Plugin MailPoet Plugin class.vaultpress-hotfixes.php protect_aioseo_ajax unrestricted upload
CriticalCVSS 9.8No exploitEPSS 0%automattic · vaultpressJun 1, 2023
- CVE-2018-2508624Monitor
sea75300 FanPress CM Template Preview templatepreview.php getArticlesPreview cross site scripting
MediumCVSS 6.1No exploitEPSS 0%fanpress cm project · fanpress cmJun 1, 2023
- CVE-2015-1010835Monitor
meitar Inline Google Spreadsheet Viewer Plugin inline-gdocs-viewer.php displayShortcode cross-site request forgery
HighCVSS 8.8No exploitEPSS 0%inline google spreadsheet viewer project · inline google spreadsheet viewerMay 31, 2023
- CVE-2015-1010724Monitor
Simplr Registration Form Plus+ Plugin cross site scripting
MediumCVSS 6.1No exploitEPSS 0%simplr registration form plus\+ project · simplr registration form plus\+May 30, 2023
- CVE-2014-12510324Monitor
BestWebSoft Twitter Plugin twitter.php twttr_settings_page cross site scripting
MediumCVSS 6.1No exploitEPSS 0%bestwebsoft · twitterMay 30, 2023
- CVE-2012-1001535Monitor
BestWebSoft Twitter Plugin Settings Page twitter.php twttr_settings_page cross-site request forgery
HighCVSS 8.8No exploitEPSS 0%bestwebsoft · twitterMay 30, 2023
- CVE-2014-12510230Monitor
Bestwebsoft Relevant Plugin Thumbnail information disclosure
HighCVSS 7.5No exploitEPSS 0%bestwebsoft · relevantMay 29, 2023
- CVE-2021-433639Monitor
ITRS Group monitor-ninja scheduled_reports.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%itrsgroup · ninjaMay 28, 2023
- CVE-2014-12510139Monitor
Portfolio Gallery Plugin sql injection
CriticalCVSS 9.8No exploitEPSS 0%huge-it · portfolio galleryMay 28, 2023
- CVE-2016-1503139Monitor
PHP-Login POST Parameter class.loginscript.php checkLogin sql injection
CriticalCVSS 9.8No exploitEPSS 0%php-login project · php-loginMay 5, 2023
- CVE-2017-2018324Monitor
External Media without Import Plugin external-media-without-import.php print_media_new_panel cross site scripting
MediumCVSS 6.1No exploitEPSS 0%external media without import project · external media without importMay 4, 2023
- CVE-2014-12510024Monitor
BestWebSoft Job Board Plugin cross site scripting
MediumCVSS 6.1No exploitEPSS 0%bestwebsoft · job boardMay 1, 2023