Athiwat Tiprasaharn (Jitlada)

20252026

Critical

High

Medium

Low

Global Rank

#39

of 3,238 researchers

Vulns

225

Critical6

High36

Medium183

Low0

Affected Assets

189

189plugins

Avg CVSS

6.1

Average score of vulnerabilities

Researcher Submissions

225 records


2026-07-09 20:55	Logo Slider <= 5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lgx_tooltip_position' Parameter Logo Slider WP <= 5.5	`CVE-2026-13247`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2026-07-08 21:29	Bit Form <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion via '_old' Parameter Bit Form <= 3.1.1	`CVE-2026-14372`	7.1 High	Athiwat Tiprasaharn (Jitlada)	Yes
2026-07-08 00:00	Customer Reviews for WooCommerce <= 5.113.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute Customer Reviews for WooCommerce <= 5.113.0	`CVE-2026-13771`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2026-07-02 00:00	Envision Page Builder – A collection of WordPress Gutenberg blocks & templates <= 0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting Envision Page Builder <= 0.22	`CVE-2026-57780`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	No
2026-07-02 00:00	Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management <= 151 - Authenticated (Author+) Stored Cross-Site Scripting Simple URLs <= 151	`CVE-2026-57762`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	No
2026-07-01 20:04	My Calendar <= 3.7.14 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'vcal' Parameter My Calendar <= 3.7.14	`CVE-2026-11896`	5.3 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2026-07-01 17:21	Insert Pages <= 3.11.4 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Field Keys (Meta Key Names) Insert Pages <= 3.11.4	`CVE-2026-10089`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2026-06-30 16:01	JetWidgets For Elementor <= 1.0.21 - Authenticated (Author+) Stored Cross-Site Scripting via Animated Box 'animation_effect' Setting JetWidgets For Elementor <= 1.0.21	`CVE-2026-11380`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2026-06-18 16:09	Appointment Booking Calendar <= 1.4.4 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Booking Field Label Creavi Appointment Booking Calendar <= 1.4.4	`CVE-2026-1856`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2026-06-17 20:00	Slideshow Gallery LITE <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'alwaysauto' Shortcode Attribute Slideshow Gallery LITE <= 1.8.5	`CVE-2026-2021`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	Yes

Showing 1–10 of 225 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C