Skip to content
Noroxi

NAWardRox

Patchstack Bug Bounty Program

11 credited records · 1 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for NAWardRox

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2025-69101
    39Monitor

    WordPress Workreap Core plugin <= 3.4.1 - Broken Authentication vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    amentotech · workreap coreJan 22, 2026

  • CVE-2025-47583
    21Monitor

    WordPress Salon booking system plugin <= 10.16 - CSRF to Arbitrary Content Deletion vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    dimitri grassi · salon booking systemMay 19, 2025

  • CVE-2025-47567
    30Monitor

    WordPress Video Player & FullScreen Video Background plugin <= 2.4.1 - SQL Injection vulnerability

    HighCVSS 7.6No exploitEPSS 0%

    lambertgroup · video player & fullscreen video backgroundMay 16, 2025

  • CVE-2025-32618
    34Monitor

    WordPress Wishlist plugin <= 1.0.46 - SQL Injection vulnerability

    HighCVSS 8.5No exploitEPSS 0%

    pickplugins · wishlistApr 11, 2025

  • CVE-2025-31565
    37Monitor

    WordPress WPSmartContracts plugin <= 2.0.12 - SQL Injection vulnerability

    CriticalCVSS 9.3No exploitEPSS 0%

    lisandro martinez · wpsmartcontractsApr 11, 2025

  • CVE-2025-32220
    35Monitor

    WordPress Salon booking system plugin <= 10.31.9 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    salonbookingsystem · salon booking systemApr 4, 2025

  • CVE-2025-31564
    34Monitor

    WordPress Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin <= 2.2.6 - SQL Injection vulnerability

    HighCVSS 8.5No exploitEPSS 0%

    aitool · ai auto tool content writing assistant (gemini writer, chatgpt ) all in oneApr 1, 2025

  • CVE-2025-31826
    21Monitor

    WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - Broken Access Control vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    anzar ahmed · ni woocommerce cost of goodsApr 1, 2025

  • CVE-2025-26941
    37Monitor

    WordPress Church Admin plugin <= 5.0.18 - SQL Injection vulnerability

    CriticalCVSS 9.3No exploitEPSS 0%

    andy_moyle · church adminMar 26, 2025

  • CVE-2025-26943
    37Monitor

    WordPress Easy Quotes plugin <= 1.2.2 - SQL Injection vulnerability

    CriticalCVSS 9.3No exploitEPSS 0%

    jürgen müller · easy quotesFeb 25, 2025

  • CVE-2024-56247
    28Monitor

    WordPress WP Post Author plugin <= 3.8.2 - SQL Injection vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    afthemes · wp post authorJan 2, 2025