Skip to content
Noroxi

Webbernaut

11 credited records · 9 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Webbernaut

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-14882
    25Monitor

    Brizy <= 2.8.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'brizy-compiled-sections' Post Meta

    MediumCVSS 6.4No exploitEPSS 0%

    themefusecom · brizy – page builderOct 10, 2026

  • CVE-2026-14877
    25Monitor

    Data Tables Generator by Supsystic <= 1.12.03 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table 'id' HTML Attribute

    MediumCVSS 6.4No exploitEPSS 0%

    supsysticcom · data tables generator by supsysticOct 10, 2026

  • CVE-2026-91108
    17Monitor

    Alt Text AI <= 1.10.41 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Content Modification via atai_enrich_post_content AJAX Action

    MediumCVSS 4.3No exploitEPSS 0%

    alttextai · alt text ai – automatically generate image alt text for seo and accessibilityOct 3, 2026

  • CVE-2026-96256
    25Monitor

    Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attribute

    MediumCVSS 6.4No exploitEPSS 0%

    wpdevteam · gutenberg essential blocks – page builder for gutenberg blocks & patternsOct 1, 2026

  • CVE-2026-14876
    25Monitor

    Smart Slider 3 <= 3.5.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-href' Attribute in Custom HTML Block

    MediumCVSS 6.4No exploitEPSS 0%

    nextendweb · smart slider 3Sep 30, 2026

  • CVE-2026-0551
    35Monitor

    PPWP – Password Protect Pages <= 1.9.18 - Authenticated (Contributor+) PHP Object Injection via post_protection_roles

    HighCVSS 8.8No exploitEPSS 0%

    buildwps · ppwp – password protect pagesAug 23, 2026

  • CVE-2026-12801
    25Monitor

    Ultra Addons for Contact Form 7 <= 3.5.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider Attributes

    MediumCVSS 6.4No exploitEPSS 0%

    themefic · ultra addons for contact form 7Aug 7, 2026

  • CVE-2026-13114
    28Monitor

    Motors <= 1.4.112 - Unauthenticated Stored Cross-Site Scripting via Comment Content and User Biographical Info

    HighCVSS 7.2No exploitEPSS 0%

    stylemix · motors – car dealership & classified listings pluginJul 11, 2026

  • CVE-2026-12240
    32Monitor

    Export User Data <= 2.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion via display_name Field

    HighCVSS 8.0No exploitEPSS 0%

    qlstudio · export user dataJun 30, 2026

  • CVE-2024-5647
    25Monitor

    Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library

    MediumCVSS 6.4No exploitEPSS 0%

    blossomthemes · blossomthemes social feedJul 3, 2025

  • CVE-2023-3372
    21Monitor

    Lana Shortcodes < 1.2.0 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    lana · lana shortcodesJan 16, 2024