Skip to content
Noroxi

Jitlada

Patchstack Bug Bounty Program

43 credited records · 43 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Jitlada

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-27350
    28Monitor

    WordPress Builderius plugin <= 1.4-beta - Server Side Request Forgery (SSRF) vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    builderius.io · builderiusOct 10, 2026

  • CVE-2026-57780
    26Monitor

    WordPress Envision Page Builder plugin <= 0.22 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    plugin envision · envision page builderJul 13, 2026

  • CVE-2026-57762
    23Monitor

    WordPress Simple URLs plugin <= 151 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    andrew fiebert · simple urlsJul 2, 2026

  • CVE-2026-27405
    26Monitor

    WordPress WpBookingly plugin <= 1.2.9 - Broken Access Control vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    magepeople inc. · wpbookinglyMay 20, 2026

  • CVE-2026-39654
    23Monitor

    WordPress WP Simple HTML Sitemap plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    ashish ajani · wp simple html sitemapApr 8, 2026

  • CVE-2026-39646
    26Monitor

    WordPress Leaflet Map plugin <= 3.4.4 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    bozdoz · leaflet mapApr 8, 2026

  • CVE-2026-39638
    23Monitor

    WordPress Qubely plugin <= 1.8.14 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    themeum · qubelyApr 8, 2026

  • CVE-2026-39636
    26Monitor

    WordPress Livemesh Addons for Elementor plugin <= 9.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5Proof of conceptEPSS 0%

    livemesh · livemesh addons for elementorApr 8, 2026

  • CVE-2026-39607
    21Monitor

    WordPress Filter Plus plugin <= 1.1.17 - Broken Access Control vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    wpbens · filter plusApr 8, 2026

  • CVE-2026-39604
    23Monitor

    WordPress MyBookTable Bookstore plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    zookatron · mybooktable bookstoreApr 8, 2026

  • CVE-2026-39575
    26Monitor

    WordPress Custom Query Blocks plugin <= 5.5.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    ronald huereca · custom query blocksApr 8, 2026

  • CVE-2026-39517
    26Monitor

    WordPress Blog Filter plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    a wp life · blog filterApr 8, 2026

  • CVE-2026-39510
    10Monitor

    WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Insecure Direct Object References (IDOR) vulnerability

    LowCVSS 2.7No exploitEPSS 0%

    wp chill · image photo gallery final tiles gridApr 8, 2026

  • CVE-2026-32441
    30Monitor

    WordPress Comments Import & Export plugin <= 2.4.9 - Broken Access Control vulnerability

    HighCVSS 7.7No exploitEPSS 0%

    webtoffee · comments import & exportMar 25, 2026

  • CVE-2026-22485
    26Monitor

    WordPress My Album Gallery plugin <= 1.0.4 - Arbitrary File Deletion vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    ruhul amin · my album galleryMar 25, 2026

  • CVE-2025-69347
    34Monitor

    WordPress WPSubscription plugin <= 1.8.10 - Insecure Direct Object References (IDOR) vulnerability

    HighCVSS 8.6No exploitEPSS 0%

    convers lab · wpsubscriptionMar 25, 2026

  • CVE-2026-32419
    23Monitor

    WordPress List category posts plugin <= 0.93.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    fernando briano · list category postsMar 13, 2026

  • CVE-2026-32351
    23Monitor

    WordPress PowerPress Podcasting plugin <= 11.15.13 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    blubrry · powerpress podcastingMar 13, 2026

  • CVE-2026-31918
    26Monitor

    WordPress immonex Kickstart plugin <= 1.13.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    immonex · immonex kickstartMar 13, 2026

  • CVE-2025-69394
    30Monitor

    WordPress Cnvrse plugin < 026.02.10.20 - Insecure Direct Object References (IDOR) vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    cnvrse · cnvrseFeb 20, 2026

  • CVE-2026-25387
    17Monitor

    WordPress Image Optimizer by Elementor plugin <= 1.7.1 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    elementor · image optimizer by elementorFeb 19, 2026

  • CVE-2026-25385
    22Monitor

    WordPress URL Shortify plugin <= 1.12.3 - Server Side Request Forgery (SSRF) vulnerability

    MediumCVSS 5.5No exploitEPSS 0%

    kaizencoders · url shortifyFeb 19, 2026

  • CVE-2026-25016
    17Monitor

    WordPress Nelio Popups plugin <= 1.3.5 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    nelio software · nelio popupsFeb 3, 2026

  • CVE-2026-24626
    23Monitor

    WordPress Logo Slider plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    logichunt · logo sliderJan 23, 2026

  • CVE-2026-24614
    23Monitor

    WordPress Flex QR Code Generator plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    devsbrain · flex qr code generatorJan 23, 2026