Skip to content
Noroxi

stealthcopter

Patchstack Bug Bounty Program

218 credited records · 9 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for stealthcopter

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-17025
    25Monitor

    Graphene <= 2.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Fields

    MediumCVSS 6.4No exploitEPSS 0%

    silverks · grapheneOct 10, 2026

  • CVE-2026-3129
    25Monitor

    LiteSpeed Cache <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting via img Tag Attributes

    MediumCVSS 6.4No exploitEPSS 0%

    litespeedtech · litespeed cacheAug 28, 2026

  • CVE-2026-15421
    25Monitor

    Speed Optimizer <= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Tag Attributes

    MediumCVSS 6.4No exploitEPSS 0%

    siteground · speed optimizer – the all-in-one performance-boosting pluginAug 19, 2026

  • CVE-2026-18385
    21Monitor

    Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.16.19 - Authenticated (Subscriber+) Arbitrary Shortc

    MediumCVSS 5.4No exploitEPSS 0%

    properfraction · paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content – profilepressAug 16, 2026

  • CVE-2026-15297
    24Monitor

    Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.77 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    neeraj_slit · brevo – email, sms, web push, chat, and more.Jul 10, 2026

  • CVE-2026-28044
    23Monitor

    WordPress WP Rocket plugin <= 3.19.4 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    wp media · wp rocketMar 19, 2026

  • CVE-2026-28134
    34Monitor

    WordPress JetEngine plugin <= 3.7.2 - Remote Code Execution (RCE) vulnerability

    HighCVSS 8.5Proof of conceptEPSS 0%

    crocoblock · jetengineMar 5, 2026

  • CVE-2024-56208
    26Monitor

    WordPress NewsMash theme <= 1.0.71 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    desertthemes · newsmashFeb 20, 2026

  • CVE-2025-68562
    39Monitor

    WordPress MapSVG plugin <= 8.7.3 - Arbitrary File Upload vulnerability

    CriticalCVSS 9.9No exploitEPSS 0%

    romancode · mapsvgDec 29, 2025

  • CVE-2025-48088
    26Monitor

    WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    brainstorm_force · ultimate addons for wpbakery page builderOct 27, 2025

  • CVE-2025-60221
    39Monitor

    WordPress Captivate Sync Plugin <= 3.0.3 - PHP Object Injection Vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    captivateaudio · captivate syncOct 22, 2025

  • CVE-2025-49939
    26Monitor

    WordPress JetElements For Elementor plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    crocoblock · jetelements for elementorOct 22, 2025

  • CVE-2025-49938
    26Monitor

    WordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    crocoblock · jetengineOct 22, 2025

  • CVE-2025-49934
    26Monitor

    WordPress JetBlocks For Elementor plugin <= 1.3.18 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    crocoblock · jetblocks for elementorOct 22, 2025

  • CVE-2025-49933
    26Monitor

    WordPress JetBlog plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    crocoblock · jetblogOct 22, 2025

  • CVE-2025-49932
    26Monitor

    WordPress JetBlog plugin <= 2.4.4.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    crocoblock · jetblogOct 22, 2025

  • CVE-2025-49931
    37Monitor

    WordPress JetSearch plugin <= 3.5.10 - SQL Injection vulnerability

    CriticalCVSS 9.3No exploitEPSS 0%

    crocoblock · jetsearchOct 22, 2025

  • CVE-2025-49930
    28Monitor

    WordPress JetSearch plugin <= 3.5.10 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    crocoblock · jetsearchOct 22, 2025

  • CVE-2025-49928
    26Monitor

    WordPress JetWooBuilder plugin <= 2.1.20 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    crocoblock · jetwoobuilderOct 22, 2025

  • CVE-2025-49927
    26Monitor

    WordPress JetWooBuilder plugin <= 2.1.20.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    crocoblock · jetwoobuilderOct 22, 2025

  • CVE-2025-49921
    30Monitor

    WordPress JetReviews plugin <= 3.0.0 - Local File Inclusion vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    crocoblock · jetreviewsOct 22, 2025

  • CVE-2025-54008
    26Monitor

    WordPress JetSmartFilters <= 3.6.7 - Sensitive Data Exposure Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    crocoblock · jetsmartfiltersAug 20, 2025

  • CVE-2025-53998
    26Monitor

    WordPress JetWooBuilder <= 2.1.20 - Sensitive Data Exposure Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    crocoblock · jetwoobuilderAug 20, 2025

  • CVE-2025-53993
    26Monitor

    WordPress JetPopup plugin <= 2.0.15 - Sensitive Data Exposure vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    crocoblock · jetpopupAug 20, 2025

  • CVE-2025-53992
    26Monitor

    WordPress JetTricks <= 1.5.4.1 - Sensitive Data Exposure Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    crocoblock · jettricksAug 20, 2025