Skip to content
Noroxi

D.Sim

152 credited records · 19 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for D.Sim

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2025-8444
    25Monitor

    Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates <= 2.6.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

    MediumCVSS 6.4No exploitEPSS 0%

    wealcoder · animation addons for elementor – gsap motion elementor addons & website templatesJun 10, 2026

  • CVE-2025-14149
    25Monitor

    Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Scroller Widget box link

    MediumCVSS 6.4No exploitEPSS 0%

    xpro · xpro addons — 140+ widgets for elementorFeb 27, 2026

  • CVE-2026-1216
    28Monitor

    RSS Aggregator <= 5.0.10 - Reflected Cross-Site Scripting via 'template' Parameter

    HighCVSS 7.2No exploitEPSS 0%

    rebelcode · rss aggregator – rss import, news feeds, feed to post, and autobloggingFeb 17, 2026

  • CVE-2025-14274
    21Monitor

    Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget

    MediumCVSS 5.4No exploitEPSS 0%

    unitecms · unlimited elements for elementorFeb 3, 2026

  • CVE-2025-9082
    25Monitor

    WPBITS Addons For Elementor <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 6.4No exploitEPSS 0%

    wpbits · wpbits addons for elementor page builderJan 28, 2026

  • CVE-2025-15283
    28Monitor

    Name Directory <= 1.30.3 - Unauthenticated Stored Cross-Site Scripting via Multiple Parameters

    HighCVSS 7.2No exploitEPSS 0%

    jeroenpeters1986 · name directoryJan 14, 2026

  • CVE-2025-15266
    28Monitor

    GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation <= 1.1.8 - Unauthenticated Stored Cross-Site Scripting

    HighCVSS 7.2No exploitEPSS 0%

    ahmadgb · geekybot — generate ai content without prompt, chatbot and lead generationJan 14, 2026

  • CVE-2025-14635
    25Monitor

    Happy Addons for Elementor <= 3.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS

    MediumCVSS 6.4No exploitEPSS 0%

    thehappymonster · happy addons for elementorDec 23, 2025

  • CVE-2025-11496
    24Monitor

    Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.5 - Unauthenticated Stored Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    rustaurius · five star restaurant reservations – wordpress booking pluginDec 21, 2025

  • CVE-2025-14154
    24Monitor

    Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.10.2 - Unauthenticated Stored Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    wordplus · better messages – live chat, chat rooms, real-time messaging & private messagesDec 17, 2025

  • CVE-2025-8780
    25Monitor

    Livemesh SiteOrigin Widgets <= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Hero Header and Pricing Table Widgets

    MediumCVSS 6.4No exploitEPSS 0%

    livemesh · livemesh siteorigin widgetsDec 13, 2025

  • CVE-2025-8779
    25Monitor

    All-in-One Addons for Elementor – WidgetKit <= 2.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team and Countdown Widgets

    MediumCVSS 6.4No exploitEPSS 0%

    shamsbd71 · all-in-one addons for elementor – widgetkitDec 13, 2025

  • CVE-2025-8687
    25Monitor

    Enter Addons <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown and Image Comparison Widgets

    MediumCVSS 6.4No exploitEPSS 0%

    themelooks · enter addons – ultimate template builder for elementorDec 13, 2025

  • CVE-2025-8199
    25Monitor

    MarqueeAddons <= 2.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Marquee Widget

    MediumCVSS 6.4No exploitEPSS 0%

    debuggersstudio · marquee addons for elementor – essential motion widgets & templatesDec 13, 2025

  • CVE-2025-8195
    25Monitor

    JetWidgets For Elementor <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison and Subscribe Widgets

    MediumCVSS 6.4No exploitEPSS 0%

    jetmonsters · jetwidgets for elementorDec 13, 2025

  • CVE-2025-7960
    25Monitor

    King Addons for Elementor <= 51.1.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

    MediumCVSS 6.4No exploitEPSS 0%

    kingaddons · king addons for elementor – 80+ elementor widgets, 4 000+ elementor templates, woocommerce, mega menu, popup builderDec 13, 2025

  • CVE-2025-13196
    21Monitor

    Element Pack Addons for Elementor <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map widget

    MediumCVSS 5.4No exploitEPSS 0%

    bdthemes · element pack – widgets, templates & addons for elementorNov 18, 2025

  • CVE-2025-8609
    25Monitor

    RTMKit Addons <= 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Repeater Block Attribute

    MediumCVSS 6.4No exploitEPSS 0%

    rometheme · rtmkitNov 18, 2025

  • CVE-2025-8605
    25Monitor

    Gutenify - Visual Site Builder Blocks & Site Templates <= 1.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Count Up block

    MediumCVSS 6.4No exploitEPSS 0%

    codeyatri · gutenify – visual site builder blocks & site templates.Nov 18, 2025

  • CVE-2025-8666
    25Monitor

    Testimonial Carousel For Elementor <= 11.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

    MediumCVSS 6.4No exploitEPSS 0%

    uapp · testimonial carousel for elementorOct 25, 2025

  • CVE-2025-8588
    25Monitor

    Gutenberg Blocks – PublishPress Blocks Controls, Visibility, Reusable Blocks <= 3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 6.4No exploitEPSS 0%

    publishpress · publishpress blocks – block controls, block visibility, block permissionsOct 25, 2025

  • CVE-2025-9030
    21Monitor

    Majestic Before After Image <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    maneshtimilsina · majestic before after imageOct 4, 2025

  • CVE-2025-8726
    21Monitor

    WP Photo Album Plus <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload

    MediumCVSS 5.4No exploitEPSS 0%

    opajaap · wp photo album plusOct 4, 2025

  • CVE-2025-9206
    25Monitor

    Meks Easy Maps <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 6.4No exploitEPSS 0%

    mekshq · meks easy mapsOct 3, 2025

  • CVE-2025-9204
    25Monitor

    X Addons for Elementor <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Youtube Video ID Field

    MediumCVSS 6.4No exploitEPSS 0%

    pencilwp · x addons for elementorOct 3, 2025