K. Sorrachat

K. Sorrachat is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #835 of 3,899 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (40%). Other recurring categories include Missing Authorization, Code Injection. The average CVSS score across these disclosures is 6.8, peaking at 9.8. Severity breakdown: 1 critical and 2 high.

The most affected software includes Ansar Import (1), QA Assistants (1), Tangible (1), across 5 distinct plugins, themes and core versions in total.

4 of the 5 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "QA Assistants – Driven by data <= 5.2.0.0 - Unauthenticated Remote Code Execution", scores 9.8 out of 10.

2026

Critical

High

Medium

Low

Global Rank

#835

of 3,899 researchers

Vulns

Critical1

High2

Medium2

Low0

Affected Assets

5plugins

Avg CVSS

6.8

Average score of vulnerabilities

Researcher Submissions

5 records


2026-10-05 16:42	Ansar Import – One Click Starter Sites – for WordPress Themes <= 2.1.2 - Unauthenticated Stored Cross-Site Scripting Ansar Import <= 2.1.2	`CVE-2026-39778`	7.2 High	K. Sorrachat	No
2026-09-23 11:57	Tangible: Loops & Logic <= 4.2.4 - Missing Authorization Tangible <= 4.2.4	`CVE-2026-95604`	5.3 Medium	K. Sorrachat	Yes
2026-08-11 00:00	Welcart e-Commerce <= 2.11.31 - Unauthenticated Stored Cross-Site Scripting Welcart e-Commerce <= 2.11.31	`CVE-2026-27539`	7.2 High	K. Sorrachat	Yes
2026-08-11 00:00	QA Assistants – Driven by data <= 5.2.0.0 - Unauthenticated Remote Code Execution QA Assistants <= 5.2.0.0	`CVE-2026-27544`	9.8 Critical	K. Sorrachat	Yes
2026-07-27 00:00	YayPricing <= 3.5.6 - Missing Authorization YayPricing <= 3.5.6	`CVE-2026-66442`	4.3 Medium	K. Sorrachat	Yes

Showing 1–5 of 5 reports