Skip to content
Noroxi

cazy

Patchstack Bug Bounty Program

9 credited records · 9 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for cazy

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-62019
    17Monitor

    WordPress BookIt plugin <= 2.6.0.6 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    liquid web / stellarwp · bookit5 days ago

  • CVE-2026-110376
    17Monitor

    WordPress DEPART plugin <= 1.0.10 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    villatheme · departOct 26, 2026

  • CVE-2026-111396
    28Monitor

    WordPress Advanced Post Manager plugin <= 4.5.6 - Broken Access Control vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    liquid web / stellarwp · advanced post managerOct 16, 2026

  • CVE-2026-103081
    30Monitor

    WordPress Salevo plugin <= 1.3.0 - Content Injection vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    villatheme · salevoOct 14, 2026

  • CVE-2026-103358
    30Monitor

    WordPress Email Template Customizer for WooCommerce plugin <= 1.3.4 - Content Injection vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    villatheme · email template customizer for woocommerceOct 14, 2026

  • CVE-2026-108476
    20Monitor

    WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerability

    MediumCVSS 5.0No exploitEPSS 0%

    videowhisper.com · paid videochat turnkey siteOct 12, 2026

  • CVE-2026-103071
    30Monitor

    WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.3 - Content Injection vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    villatheme · thank you page customizer for woocommerceOct 10, 2026

  • CVE-2026-102383
    26Monitor

    WordPress Lookzy plugin <= 1.1.14 - Broken Access Control vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    villatheme · lookzyOct 5, 2026

  • CVE-2026-102379
    34Monitor

    WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - SQL Injection vulnerability

    HighCVSS 8.5No exploitEPSS 0%

    villatheme · buildkit – product builder for woocommerce – custom pc builderOct 1, 2026