Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Noor alam — Vulnerabilities & Security Advisories 18

Browse all 18 CVE security advisories affecting Noor alam. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Noor alam is a security researcher focused on identifying vulnerabilities in web applications and enterprise systems, with 17 CVEs primarily in authentication bypasses and input validation flaws. Common vulnerability classes include remote code execution, cross-site scripting, and privilege escalation, often in popular frameworks and CMS platforms. Security characteristics center on thorough code analysis and edge case exploitation, with no major public incidents reported. The researcher demonstrates consistent impact through high-severity findings that address critical weaknesses in widely deployed software, contributing significantly to improving security postures across affected platforms.

CVE ID Title CVSS Severity Published
CVE-2026-57657 WordPress Gmail SMTP plugin <= 1.2.3.19 - Cross Site Request Forgery (CSRF) vulnerability — Gmail SMTP CWE-352 4.3 Medium 2026-06-26
CVE-2026-32538 WordPress SMTP Mailer plugin <= 1.1.24 - Sensitive Data Exposure vulnerability — SMTP Mailer CWE-201 7.5 High 2026-03-25
CVE-2026-32429 WordPress Magical Addons For Elementor plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability — Magical Addons For Elementor CWE-79 6.5 Medium 2026-03-13
CVE-2026-32387 WordPress Checkout for PayPal plugin <= 1.0.46 - Broken Access Control vulnerability — Checkout for PayPal CWE-862 5.3 Medium 2026-03-13
CVE-2025-69169 WordPress Easy Media Download plugin <= 1.1.11 - CSS Injection vulnerability — Easy Media Download CWE-80 5.4 Medium 2026-01-08
CVE-2025-49397 WordPress Colorbox Lightbox Plugin <= 1.1.5 - Cross Site Scripting (XSS) Vulnerability — Colorbox Lightbox CWE-79 6.5 Medium 2025-08-20
CVE-2025-54706 WordPress Magical Posts Display Plugin plugin <= 1.2.52 - Cross Site Scripting (XSS) Vulnerability — Magical Posts Display CWE-79 6.5 Medium 2025-08-14
CVE-2025-26591 WordPress WP fancybox plugin <= 1.0.3 - Cross Site Scripting (XSS) Vulnerability — WP fancybox CWE-79 6.5 Medium 2025-07-04
CVE-2025-39572 WordPress Checkout for PayPal plugin <= 1.0.38 - Cross Site Scripting (XSS) Vulnerability — Checkout for PayPal CWE-79 6.5 Medium 2025-04-16
CVE-2025-31844 WordPress Magical Blocks plugin <= 1.0.12 - Cross Site Scripting (XSS) vulnerability — Magical Blocks CWE-79 6.5 Medium 2025-04-01
CVE-2024-54212 WordPress Magical Addons For Elementor plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability — Magical Addons For Elementor CWE-79 6.5 Medium 2024-12-06
CVE-2024-51892 WordPress Sell Media File with Stripe plugin <= 1.0.6 - Stored Cross Site Scripting (XSS) vulnerability — Sell Media File with Stripe CWE-79 6.5 Medium 2024-11-19
CVE-2024-51665 WordPress Magical Addons For Elementor plugin <= 1.2.1 - Server Side Request Forgery (SSRF) vulnerability — Magical Addons For Elementor CWE-918 4.9 Medium 2024-11-04
CVE-2024-49627 WordPress WordPress Image SEO plugin <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability — WordPress Image SEO CWE-352 4.3 Medium 2024-10-20
CVE-2024-38730 WordPress Magical Addons For Elementor plugin <= 1.1.41 - Server Side Request Forgery (SSRF) vulnerability — Magical Addons For Elementor CWE-918 4.9 Medium 2024-07-22
CVE-2024-37951 WordPress Magical Posts Display plugin <= 1.2.38 - Cross Site Scripting (XSS) vulnerability — Magical Posts Display – Elementor & Gutenberg Posts Blocks CWE-79 6.5 Medium 2024-07-20
CVE-2024-38681 WordPress Magical Addons For Elementor plugin <= 1.1.41 - Cross Site Scripting (XSS) vulnerability — Magical Addons For Elementor CWE-79 6.5 Medium 2024-07-20
CVE-2024-34547 WordPress Magical Addons For Elementor plugin <= 1.1.34 - Cross Site Scripting (XSS) vulnerability — Magical Addons For Elementor CWE-79 6.5 Medium 2024-05-08

This page lists every published CVE security advisory associated with Noor alam. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.