← All credits
Itthidej Aramsri
93 vulnerability records and advisories credit this contributor.
CVE-2026-1252
Events Listing Widget <= 1.3.4 - Authenticated (Author+) Stored Cross-Site Scripting via Event URL Field
CVE-2026-1294
All In One Image Viewer Block <= 1.0.2 - Unauthenticated Server-Side Request Forgery via image-proxy Endpoint
CVE-2025-12782
Beaver Builder – WordPress Page Builder <= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Builder Status Tampering
CVE-2025-12707
Library Management System <= 3.2.1 - Unauthenticated SQL Injection
CVE-2025-14079
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update
CVE-2026-2001
WowRevenue <= 2.1.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
CVE-2026-2724
Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields
CVE-2025-12088
Meta Display Block <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-13494
SSP Debug <= 1.0.0 - Unauthenticated Sensitive Information Exposure
CVE-2026-0920
LA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter