Skip to content
Noroxi

Dave Jong (Patchstack)

Patchstack Bug Bounty Program

253 credited records · 8 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Dave Jong (Patchstack)

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2024-54219
    28Monitor

    WordPress AIO Contact plugin <= 2.8.1 - Unauthenticated Site-Wide Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    thehp · aio contactDec 9, 2024

  • CVE-2024-54217
    21Monitor

    WordPress ARForms plugin <= 6.4.1 - Subscriber+ Plugin Settings Change vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    reputeinfosystems · arformsDec 9, 2024

  • CVE-2024-54215
    37Monitor

    WordPress Revy plugin <= 1.18 - Unauthenticated SQL Injection vulnerability

    CriticalCVSS 9.3No exploitEPSS 0%

    roninwp · revyDec 9, 2024

  • CVE-2023-30486
    17Monitor

    WordPress Square theme <= 2.0.0 - Broken Access Control

    MediumCVSS 4.3Proof of conceptEPSS 0%

    hashthemes · squareDec 9, 2024

  • CVE-2023-30476
    17Monitor

    WordPress Blogger Buzz theme <= 1.2.2 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    sparkle themes · blogger buzzDec 9, 2024

  • CVE-2023-28532
    17Monitor

    WordPress Real Estate Directory theme <= 1.0.5 - Authenticated Arbitrary Plugin Activation

    MediumCVSS 4.3No exploitEPSS 0%

    wpdirectorykit.com · real estate directoryDec 9, 2024

  • CVE-2023-28416
    17Monitor

    WordPress Chankhe theme <= 1.0.5 - Authenticated Arbitrary Plugin Activation vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    sparkle themes · chankheDec 9, 2024

  • CVE-2024-54214
    40Plan

    WordPress Revy plugin <= 1.18 - Unauthenticated Arbitrary File Upload vulnerability

    CriticalCVSS 10.0No exploitEPSS 0%

    roninwp · revyDec 6, 2024

  • CVE-2024-54221
    37Monitor

    WordPress FAT Services Booking plugin <= 5.6 - Unauthenticated SQL Injection vulnerability

    CriticalCVSS 9.3No exploitEPSS 0%

    roninwp · fat services bookingDec 4, 2024

  • CVE-2024-39650
    39Monitor

    WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Multiple Vulnerabilities

    CriticalCVSS 9.8No exploitEPSS 0%

    wpwebelite · woocommerce pdf vouchersNov 1, 2024

  • CVE-2024-37929
    25Monitor

    WordPress User Activity Log Pro plugin <= 2.3.4 - Subscriber+ Multiple Broken Access Control vulnerability

    MediumCVSS 6.3No exploitEPSS 0%

    solwin · user activity log proNov 1, 2024

  • CVE-2024-37439
    21Monitor

    WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Subscriber+ Arbitrary Post/Page Duplication vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    uncanny owl · uncanny toolkit pro for learndashNov 1, 2024

  • CVE-2024-37232
    35Monitor

    WordPress Hercules Core plugin <= 6.5 - Subscriber+ Arbitrary Settings Change/Access vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    hercules design · hercules coreNov 1, 2024

  • CVE-2024-37119
    39Monitor

    WordPress Uncanny Automator Pro plugin < 5.3.0.1 - Unauthenticated License Settings Reset vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    uncannyowl · uncanny automatorNov 1, 2024

  • CVE-2024-37108
    30Monitor

    WordPress WishList Member X plugin < 3.26.7 - Authenticated Arbitrary File Deletion vulnerability

    HighCVSS 7.7No exploitEPSS 0%

    wishlist products · wishlist member xNov 1, 2024

  • CVE-2024-37106
    32Monitor

    WordPress WishList Member X plugin < 3.26.7 - Unautenticated Plugin Settings Change Leading to Stored XSS vulnerability

    HighCVSS 8.2No exploitEPSS 0%

    wishlist products · wishlist member xNov 1, 2024

  • CVE-2024-43947
    17Monitor

    WordPress WP Armour Extended plugin <= 1.26 - Cross Site Request Forgery (CSRF) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    dineshkarki · wp armourAug 29, 2024

  • CVE-2024-43950
    24Monitor

    WordPress Brickscore plugin <= 1.4.2.5 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    nextbricks · bricksoreAug 29, 2024

  • CVE-2024-43948
    24Monitor

    WordPress WP Armour Extended plugin <= 1.26 - Reflected Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    dineshkarki · wp armourAug 29, 2024

  • CVE-2024-43955
    30Monitor

    WordPress Droip plugin <= 1.1.1 - Unauthenticated Arbitrary File Download/Deletion vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    themeum · droipAug 29, 2024

  • CVE-2024-43954
    25Monitor

    WordPress Droip plugin <= 1.1.1 - Subscriber+ Settings Change/Data Exposure Vulnerability

    MediumCVSS 6.3No exploitEPSS 0%

    themeum · droipAug 29, 2024

  • CVE-2024-43943
    35Monitor

    WordPress Greenshift Woocommerce Addon plugin < 1.9.8 - Subscriber+ SQL Injection vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    wpsoul · greenshift woocommerce addonAug 29, 2024

  • CVE-2024-43942
    35Monitor

    WordPress Greenshift Query and Meta Addon plugin < 3.9.2 - Subscriber+ SQL Injection vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    wpsoul · greenshift query addonAug 29, 2024

  • CVE-2024-43941
    39Monitor

    WordPress Propovoice Pro plugin <= 1.7.0.3 - Unauthenticated SQL Injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    propovoice · propovoiceAug 29, 2024

  • CVE-2024-43940
    26Monitor

    WordPress Z Y N I T H plugin <= 7.4.9 - Unauthenticated Plugin Settings Change vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    zynith · zynithAug 29, 2024