Itthidej Aramsri (Boeing777)

Itthidej Aramsri (Boeing777) is a security researcher credited with 106 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #69 of 3,515 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2026, with 92 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 47 of their findings (44%). Other recurring categories include Missing Authorization, SQL Injection. The average CVSS score across these disclosures is 6.6, peaking at 9.8. Severity breakdown: 6 critical and 29 high.

The most affected software includes Beaver Builder Page Builder (2), Customer Reviews for WooCommerce (2), Envira Gallery (2), across 96 distinct plugins, themes and core versions in total.

89 of the 106 disclosed issues have a vendor fix, while 17 remain unpatched. The most severe finding, "Quick Playground <= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Upload", scores 9.8 out of 10.

20252026

Critical

High

Medium

Low

Global Rank

#69

of 3,515 researchers

Vulns

106

Critical6

High29

Medium71

Low0

Affected Assets

95plugins1theme

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

106 records


2026-09-08 00:00	Graphina <= 3.1.11 - Authenticated (Author+) Stored Cross-Site Scripting via 'iq_tree_tree_chart_template' Widget Setting Graphina <= 3.1.11	`CVE-2026-13709`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2026-09-02 16:05	GutenKit <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'postBodyCss' GutenKit <= 2.4.4	`CVE-2026-2573`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2026-08-25 00:00	Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI Greenshift <= 12.8.9	`CVE-2026-5092`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2026-08-22 00:37	Image Photo Gallery Final Tiles Grid <= 3.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'delay' Shortcode Attribute Image Photo Gallery Final Tiles Grid <= 3.6.12	`CVE-2026-4559`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2026-08-04 18:38	ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST API ShopLentor <= 3.3.7	`CVE-2026-6020`	7.2 High	Itthidej Aramsri (Boeing777)	Yes
2026-08-04 18:28	TableOn <= 1.0.5.1 - Unauthenticated Blind SQL Injection via 'comment_count' Filter Parameter TableOn <= 1.0.5.1	`CVE-2026-18881`	7.5 High	Athiwat Tiprasaharn (Jitlada)	Yes
2026-08-04 18:22	LightSync Pro <= 2.1.6 - Authenticated (Author+) Arbitrary File Upload LightSync Pro <= 2.1.6	`CVE-2026-6147`	8.8 High	Athiwat Tiprasaharn (Jitlada)	Yes
2026-08-04 16:45	Content Egg <= 11.3.0 - Authenticated (Author+) Arbitrary File Deletion Content Egg <= 11.3.0	`CVE-2026-15979`	8.1 High	Athiwat Tiprasaharn (Jitlada)	Yes
2026-07-31 17:05	FormGent <= 1.9.2- Missing Authorization to Unauthenticated Arbitrary File Deletion via 'file_token' Parameter FormGent <= 1.9.2	`CVE-2026-3141`	9.1 Critical	Athiwat Tiprasaharn (Jitlada)	Yes
2026-07-28 13:51	Survey Form Block <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Survey Submission Data Export Survey Form Block <= 1.0.1	`CVE-2026-5626`	4.3 Medium	Itthidej Aramsri (Boeing777)	Yes

Showing 1–10 of 106 reports