← All credits
Athiwat Tiprasaharn
176 vulnerability records and advisories credit this contributor.
CVE-2025-12527
Page & Post Notes <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Note Update/Deletion
CVE-2025-12526
Private Google Calendars <= 20250811 - Missing Authorization to Authenticated (Subscriber+) Settings Reset
CVE-2025-12366
Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.5 - Authenticated (Author+) Insecure Direct Object Reference
CVE-2025-12193
Mang Board WP <= 2.3.1 - Reflected Cross-Site Scripting
CVE-2025-12126
The Total Book Project <= 1.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Book Manipulation
CVE-2025-12112
Insert Headers and Footers Code – HT Script <= 1.1.6 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2025-12085
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Empty
CVE-2025-12041
ERI File Library <= 1.1.0 - Missing Authorization to Unauthenticated Protected File Download
CVE-2025-12023
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Ticket Restore
CVE-2025-12022
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Trash Restore