Skip to content
Noroxi

wesley

325 credited records · 5 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for wesley

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-5149
    26Monitor

    RTMKit <= 2.0.7 - Authenticated (Contributor+) Missing Authorization to Arbitrary Form Submission Access via 'entries_id' Parameter

    MediumCVSS 6.5No exploitEPSS 0%

    rometheme · rtmkitJun 16, 2026

  • CVE-2026-3018
    30Monitor

    Newsletters <= 4.13 - Unauthenticated SQL Injection via wpmlsubscriber_id Parameter

    HighCVSS 7.5Proof of conceptEPSS 1%

    contrid · newslettersJun 10, 2026

  • CVE-2026-5032
    31Monitor

    W3 Total Cache <= 2.9.3 - Unauthenticated Security Token Exposure via User-Agent Header

    HighCVSS 7.5Proof of conceptEPSS 3%

    boldgrid · w3 total cacheApr 2, 2026

  • CVE-2025-13910
    24Monitor

    WP-WebAuthn <= 1.3.4 - Unauthenticated Stored Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    axton · wp-webauthnMar 21, 2026

  • CVE-2025-14002
    32Monitor

    WPCOM Member <= 1.7.16 - Authentication Bypass via Weak OTP

    HighCVSS 8.1No exploitEPSS 0%

    whyun · wpcom memberDec 16, 2025

  • CVE-2025-8606
    9Monitor

    GSheetConnector For Gravity Forms <= 1.3.23 - Cross-Site Request Forgery to Arbitrary Plugin Activation/Deactivation

    LowCVSS 2.4No exploitEPSS 0%

    westerndeal · gsheetconnector for gravity forms – send gravity forms entries to google sheets in real-timeOct 11, 2025

  • CVE-2025-8593
    35Monitor

    GSheetConnector For Gravity Forms <= 1.3.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation

    HighCVSS 8.8No exploitEPSS 0%

    westerndeal · gsheetconnector for gravity forms – send gravity forms entries to google sheets in real-timeOct 11, 2025

  • CVE-2025-7634
    39Monitor

    WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Unauthenticated Local File Inclusion

    CriticalCVSS 9.8No exploitEPSS 0%

    wptravelengine · wp travel engine – tour booking plugin – tour operator softwareOct 9, 2025

  • CVE-2025-7526
    39Monitor

    WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Authenticated (Subscriber+) Arbitrary File Deletion via File Renaming

    CriticalCVSS 9.8No exploitEPSS 0%

    wptravelengine · wp travel engine – tour booking plugin – tour operator softwareOct 9, 2025

  • CVE-2025-7052
    35Monitor

    LatePoint <= 5.1.94 - Cross-Site Request Forgery to Account Takeover via change_password() Function

    HighCVSS 8.8No exploitEPSS 0%

    latepoint · latepoint – calendar booking plugin for appointments and eventsSep 30, 2025

  • CVE-2025-7038
    32Monitor

    LatePoint <= 5.1.94 - Unauthenticated Authentication Bypass via load_step Function

    HighCVSS 8.2No exploitEPSS 0%

    latepoint · latepoint – calendar booking plugin for appointments and eventsSep 30, 2025

  • CVE-2025-8487
    21Monitor

    Kubio AI Page Builder <= 2.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation

    MediumCVSS 5.4No exploitEPSS 0%

    extendthemes · kubio ai page builderSep 19, 2025

  • CVE-2025-8565
    32Monitor

    Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.4.3 - Missing Authorization to Authenticated (Contributor+) Arbitr

    HighCVSS 8.1No exploitEPSS 0%

    wplegalpages · privacy policy generator – wplp legal pagesSep 18, 2025

  • CVE-2025-8446
    17Monitor

    Blaze Demo Importer <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install

    MediumCVSS 4.3No exploitEPSS 0%

    blazethemes · blaze demo importerSep 16, 2025

  • CVE-2025-8481
    17Monitor

    Blog Designer For Elementor – Post Slider, Post Carousel, Post Grid <= 1.1.7 - Cross-Site Request Forgery

    MediumCVSS 4.3No exploitEPSS 0%

    mdimran41 · blog designer for elementor – post slider, post carousel, post gridSep 11, 2025

  • CVE-2025-8479
    17Monitor

    Zoho Flow <= 2.14.1 - Cross-Site Request Forgery

    MediumCVSS 4.3No exploitEPSS 0%

    zohoflow · zoho flow – integrate 100+ plugins with 1000+ business apps, no-code workflow automationSep 11, 2025

  • CVE-2025-8147
    17Monitor

    LWSCache <= 2.8.5 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation via lwscache_activatePlugin Function

    MediumCVSS 4.3No exploitEPSS 0%

    aurelienlws · lwscacheAug 29, 2025

  • CVE-2024-13807
    30Monitor

    Xagio SEO <= 7.1.0.5 - Unauthenticated Sensitive Information Exposure via Unprotected Back-Up Files

    HighCVSS 7.5No exploitEPSS 0%

    xagio · xagio seo – ai powered seoAug 28, 2025

  • CVE-2024-9648
    24Monitor

    WP ULike Pro <= 1.9.3 - Unauthenticated Limited Arbitrary File Upload

    MediumCVSS 6.1No exploitEPSS 0%

    wp ulike · wp ulike proAug 28, 2025

  • CVE-2025-8102
    21Monitor

    Easy Digital Downloads <= 3.5.0 - Cross-Site Request Forgery to Plugin Deactivation via edd_sendwp_disconnect and edd_sendwp_remote_install Functions

    MediumCVSS 5.4No exploitEPSS 0%

    smub · easy digital downloads – ecommerce payments and subscriptions made easyAug 20, 2025

  • CVE-2025-7654
    35Monitor

    Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library

    HighCVSS 8.8No exploitEPSS 0%

    amans2k · funnelkit automations – email marketing automation and crm for wordpress & woocommerceAug 19, 2025

  • CVE-2025-8357
    17Monitor

    Media Library Assistant <= 3.27 - Authenticated (Author+) Limited File Deletion

    MediumCVSS 4.3No exploitEPSS 0%

    dglingren · media library assistantAug 19, 2025

  • CVE-2025-8680
    17Monitor

    B Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Server-Side Request Forgery

    MediumCVSS 4.3No exploitEPSS 0%

    bplugins · bslider – create responsive image, post, product, and video slidersAug 14, 2025

  • CVE-2025-8676
    17Monitor

    B Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Sensitive Information Exposure

    MediumCVSS 4.3No exploitEPSS 0%

    bplugins · bslider – create responsive image, post, product, and video slidersAug 14, 2025

  • CVE-2025-8418
    35Monitor

    B Slider- Gutenberg Slider Block for WP <= 1.1.30 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Plugin Installation

    HighCVSS 8.8No exploitEPSS 0%

    bplugins · bslider – create responsive image, post, product, and video slidersAug 12, 2025