← All credits
Itthidej Aramsri
93 vulnerability records and advisories credit this contributor.
CVE-2026-4302
WowOptin: Next-Gen Popup Maker <= 1.4.29 - Unauthenticated Server-Side Request Forgery via 'link' Parameter in REST API
CVE-2025-14153
Page Expire Popup/Redirection for WordPress <= 1.0 - Authenticated (Author+) SQL Injection via 'id' Shortcode Attribute
CVE-2026-0702
VidShop – Shoppable Videos for WooCommerce <= 1.1.4 - Unauthenticated Time-Based SQL Injection via 'fields'
CVE-2025-14070
Reviewify <= 1.0.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary WooCommerce Coupon Creation
CVE-2026-2020
JS Archive List <= 6.1.7 - Authenticated (Contributor+) PHP Object Injection via 'included' Shortcode Attribute
CVE-2025-14068
WPNakama <= 0.6.3 - Unauthenticated SQL Injection via 'order_by' Parameter
CVE-2025-13369
Premmerce WooCommerce Customers Manager <= 1.1.14 - Reflected Cross-Site Scripting
CVE-2025-14067
Easy Form Builder <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Response Data Exposure
CVE-2025-13973
StickEasy Protected Contact Form <= 1.0.1 - Unauthenticated Information Disclosure
CVE-2026-1231
Beaver Builder Page Builder – Drag and Drop Website Builder <= 2.10.0.5 - Authenticated (Custom+) Missing Authorization to Stored Cross-Site Scripting via Global Settings