VulDB GitHub Commit Analyzer
508 credited records · 13 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
24Monitor | CVE-2013-10026No exploit | Mail Subscribe List Plugin index.php cross site scriptingwebfwd · mail subscribe list · CWE-79 | Medium6.1 | — | 0.5% | May 1, 2023 |
39Monitor | CVE-2015-10105No exploit | IP Blacklist Cloud Plugin CSV File Import ip_blacklist_cloud.php valid_js_identifier path traversalad33lx · ip blacklist cloud · CWE-22 | Critical9.8 | — | 0.9% | Apr 30, 2023 |
24Monitor | CVE-2015-10104No exploit | Icons for Features Plugin class-icons-for-features-admin.php redirectwoocommerce · icons for features · CWE-601 | Medium6.1 | — | 0.5% | Apr 30, 2023 |
24Monitor | CVE-2012-10014No exploit | Kau-Boy Backend Localization Plugin backend_localization.php localize_backend cross site scriptingkau-boys · backend localization · CWE-79 | Medium6.1 | — | 0.5% | Apr 24, 2023 |
24Monitor | CVE-2012-10013No exploit | Kau-Boy Backend Localization Plugin backend_localization.php cross site scriptingkau-boys · backend localization · CWE-79 | Medium6.1 | — | 0.5% | Apr 24, 2023 |
24Monitor | CVE-2022-4942No exploit | mportuga eslint-detailed-reporter template-generator.js renderIssue cross site scriptingeslint-detailed-reporter project · eslint-detailed-reporter · CWE-79 | Medium6.1 | — | 0.5% | Apr 20, 2023 |
39Monitor | CVE-2014-125099No exploit | I Recommend This Plugin dot-irecommendthis.php sql injectionthemeist · i recommend this · CWE-89 | Critical9.8 | — | 0.7% | Apr 20, 2023 |
22Monitor | CVE-2015-10103No exploit | InternalError503 Forget It settings.js infinite loopforget it project · forget it · CWE-835 | Medium5.5 | — | 0.2% | Apr 17, 2023 |
24Monitor | CVE-2015-10102No exploit | Freshdesk Plugin redirectfreshworks · freshdesk · CWE-601 | Medium6.1 | — | 0.4% | Apr 17, 2023 |
24Monitor | CVE-2015-10101No exploit | Google Analytics Top Content Widget Plugin class-tgm-plugin-activation.php cross site scriptinggoogle analytics top content widget project · google analytics top content widget · CWE-79 | Medium6.1 | — | 0.5% | Apr 15, 2023 |
24Monitor | CVE-2018-25084No exploit | Ping Identity Self-Service Account Manager SSAMController.java cross site scriptingpingidentity · self-service account manager · CWE-79 | Medium6.1 | — | 0.5% | Apr 10, 2023 |
39Monitor | CVE-2015-10100No exploit | Dynamic Widgets Plugin dynwid_class.php sql injectionvivwebsolutions · dynamic widgets · CWE-89 | Critical9.8 | — | 1.0% | Apr 10, 2023 |
39Monitor | CVE-2015-10099No exploit | CP Appointment Calendar Plugin dex_appointments.php dex_process_ready_to_go_appointment sql injectioncodepeople · cp appointment calendar · CWE-89 | Critical9.8 | — | 1.0% | Apr 10, 2023 |
24Monitor | CVE-2009-10004No exploit | Turante Sandbox Theme functions.php sandbox_body_class cross site scriptingsandbox theme project · sandbox theme · CWE-79 | Medium6.1 | — | 0.5% | Apr 10, 2023 |
24Monitor | CVE-2014-125097No exploit | BestWebSoft Facebook Like Button facebook-button-plugin.php fcbkbttn_settings_page cross site scriptingbestwebsoft · facebook button · CWE-79 | Medium6.1 | — | 0.4% | Apr 10, 2023 |
24Monitor | CVE-2014-125096No exploit | Fancy Gallery Plugin Options Page class.options.php cross site scriptingfancy gallery project · fancy gallery · CWE-79 | Medium6.1 | — | 0.5% | Apr 9, 2023 |
35Monitor | CVE-2012-10012No exploit | BestWebSoft Facebook Like Button facebook-button-plugin.php fcbk_bttn_plgn_settings_page cross-site request forgerybestwebsoft · facebook button · CWE-352 | High8.8 | — | 0.3% | Apr 9, 2023 |
39Monitor | CVE-2012-10011No exploit | HD FLV PLayer Plugin functions.php hd_update_media sql injectioncontus · hd flv player · CWE-89 | Critical9.8 | — | 0.7% | Apr 9, 2023 |
24Monitor | CVE-2014-125095No exploit | BestWebSoft Contact Form Plugin bws_menu.php bws_add_menu_render cross site scriptingbestwebsoft · contact form · CWE-79 | Medium6.1 | — | 0.5% | Apr 9, 2023 |
35Monitor | CVE-2012-10010No exploit | BestWebSoft Contact Form contact_form.php cntctfrm_settings_page cross-site request forgerybestwebsoft · contact form · CWE-352 | High8.8 | — | 0.3% | Apr 9, 2023 |
35Monitor | CVE-2013-10025No exploit | Exit Strategy Plugin exitpage.php exitpageadmin cross-site request forgeryexit strategy project · exit strategy · CWE-352 | High8.8 | — | 0.4% | Apr 8, 2023 |
30Monitor | CVE-2013-10024No exploit | Exit Strategy Plugin exitpage.php information disclosureexit strategy project · exit strategy · CWE-200 | High7.5 | — | 0.7% | Apr 8, 2023 |
24Monitor | CVE-2015-10098No exploit | Broken Link Checker Plugin ui_get_action_links cross site scriptingwpmudev · broken link checker · CWE-79 | Medium6.1 | — | 0.5% | Apr 8, 2023 |
39Monitor | CVE-2013-10023No exploit | Editorial Calendar Plugin edcal.php edcal_filter_where sql injectioneditorial calendar project · editorial calendar · CWE-89 | Critical9.8 | — | 0.7% | Apr 8, 2023 |
24Monitor | CVE-2013-10022No exploit | BestWebSoft Contact Form Plugin contact_form.php cntctfrm_check_form cross site scriptingbestwebsoft · contact form · CWE-79 | Medium6.1 | — | 0.5% | Apr 5, 2023 |
- CVE-2013-1002624Monitor
Mail Subscribe List Plugin index.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%webfwd · mail subscribe listMay 1, 2023
- CVE-2015-1010539Monitor
IP Blacklist Cloud Plugin CSV File Import ip_blacklist_cloud.php valid_js_identifier path traversal
CriticalCVSS 9.8No exploitEPSS 0%ad33lx · ip blacklist cloudApr 30, 2023
- CVE-2015-1010424Monitor
Icons for Features Plugin class-icons-for-features-admin.php redirect
MediumCVSS 6.1No exploitEPSS 0%woocommerce · icons for featuresApr 30, 2023
- CVE-2012-1001424Monitor
Kau-Boy Backend Localization Plugin backend_localization.php localize_backend cross site scripting
MediumCVSS 6.1No exploitEPSS 0%kau-boys · backend localizationApr 24, 2023
- CVE-2012-1001324Monitor
Kau-Boy Backend Localization Plugin backend_localization.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%kau-boys · backend localizationApr 24, 2023
- CVE-2022-494224Monitor
mportuga eslint-detailed-reporter template-generator.js renderIssue cross site scripting
MediumCVSS 6.1No exploitEPSS 0%eslint-detailed-reporter project · eslint-detailed-reporterApr 20, 2023
- CVE-2014-12509939Monitor
I Recommend This Plugin dot-irecommendthis.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%themeist · i recommend thisApr 20, 2023
- CVE-2015-1010322Monitor
InternalError503 Forget It settings.js infinite loop
MediumCVSS 5.5No exploitEPSS 0%forget it project · forget itApr 17, 2023
- CVE-2015-1010224Monitor
Freshdesk Plugin redirect
MediumCVSS 6.1No exploitEPSS 0%freshworks · freshdeskApr 17, 2023
- CVE-2015-1010124Monitor
Google Analytics Top Content Widget Plugin class-tgm-plugin-activation.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%google analytics top content widget project · google analytics top content widgetApr 15, 2023
- CVE-2018-2508424Monitor
Ping Identity Self-Service Account Manager SSAMController.java cross site scripting
MediumCVSS 6.1No exploitEPSS 0%pingidentity · self-service account managerApr 10, 2023
- CVE-2015-1010039Monitor
Dynamic Widgets Plugin dynwid_class.php sql injection
CriticalCVSS 9.8No exploitEPSS 1%vivwebsolutions · dynamic widgetsApr 10, 2023
- CVE-2015-1009939Monitor
CP Appointment Calendar Plugin dex_appointments.php dex_process_ready_to_go_appointment sql injection
CriticalCVSS 9.8No exploitEPSS 1%codepeople · cp appointment calendarApr 10, 2023
- CVE-2009-1000424Monitor
Turante Sandbox Theme functions.php sandbox_body_class cross site scripting
MediumCVSS 6.1No exploitEPSS 0%sandbox theme project · sandbox themeApr 10, 2023
- CVE-2014-12509724Monitor
BestWebSoft Facebook Like Button facebook-button-plugin.php fcbkbttn_settings_page cross site scripting
MediumCVSS 6.1No exploitEPSS 0%bestwebsoft · facebook buttonApr 10, 2023
- CVE-2014-12509624Monitor
Fancy Gallery Plugin Options Page class.options.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%fancy gallery project · fancy galleryApr 9, 2023
- CVE-2012-1001235Monitor
BestWebSoft Facebook Like Button facebook-button-plugin.php fcbk_bttn_plgn_settings_page cross-site request forgery
HighCVSS 8.8No exploitEPSS 0%bestwebsoft · facebook buttonApr 9, 2023
- CVE-2012-1001139Monitor
HD FLV PLayer Plugin functions.php hd_update_media sql injection
CriticalCVSS 9.8No exploitEPSS 0%contus · hd flv playerApr 9, 2023
- CVE-2014-12509524Monitor
BestWebSoft Contact Form Plugin bws_menu.php bws_add_menu_render cross site scripting
MediumCVSS 6.1No exploitEPSS 0%bestwebsoft · contact formApr 9, 2023
- CVE-2012-1001035Monitor
BestWebSoft Contact Form contact_form.php cntctfrm_settings_page cross-site request forgery
HighCVSS 8.8No exploitEPSS 0%bestwebsoft · contact formApr 9, 2023
- CVE-2013-1002535Monitor
Exit Strategy Plugin exitpage.php exitpageadmin cross-site request forgery
HighCVSS 8.8No exploitEPSS 0%exit strategy project · exit strategyApr 8, 2023
- CVE-2013-1002430Monitor
Exit Strategy Plugin exitpage.php information disclosure
HighCVSS 7.5No exploitEPSS 0%exit strategy project · exit strategyApr 8, 2023
- CVE-2015-1009824Monitor
Broken Link Checker Plugin ui_get_action_links cross site scripting
MediumCVSS 6.1No exploitEPSS 0%wpmudev · broken link checkerApr 8, 2023
- CVE-2013-1002339Monitor
Editorial Calendar Plugin edcal.php edcal_filter_where sql injection
CriticalCVSS 9.8No exploitEPSS 0%editorial calendar project · editorial calendarApr 8, 2023
- CVE-2013-1002224Monitor
BestWebSoft Contact Form Plugin contact_form.php cntctfrm_check_form cross site scripting
MediumCVSS 6.1No exploitEPSS 0%bestwebsoft · contact formApr 5, 2023