Ronnachai Chaipha (rxnr)

Ronnachai Chaipha (rxnr) is a security researcher credited with 12 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #379 of 3,515 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Scripting, which accounts for 4 of their findings (33%). Other recurring categories include Improper Input Validation, Missing Authorization. The average CVSS score across these disclosures is 5.9, peaking at 8.8. Severity breakdown: 0 critical and 3 high.

The most affected software includes MailArchiver (2), Accessibly (1), Activity Logs (1), across 11 distinct plugins, themes and core versions in total.

6 of the 12 disclosed issues have a vendor fix, while 6 remain unpatched. The most severe finding, "CMS Commander <= 2.288 - Authenticated (Custom+) SQL Injection via 'or_blogname' Parameter", scores 8.8 out of 10.

2026
Critical
High
Medium
Low
Global Rank

#379

of 3,515 researchers

Vulns

12

Critical0
High3
Medium9
Low0
Affected Assets

11

11plugins
Avg CVSS

5.9

Average score of vulnerabilities

Researcher Submissions

12 records
2026-07-10 14:43CVE-2026-3576
7.2
High
chaeypYes
2026-05-11 19:04CVE-2026-6913
6.4
Medium
chaeypNo
2026-05-08 23:40CVE-2026-8198
5.3
Medium
Ronnachai Chaipha (rxnr)Yes
2026-04-14 19:47CVE-2026-3643
7.2
High
chaeypNo
2026-03-20 15:14CVE-2026-3334
8.8
High
chaeypNo
2026-03-20 15:10CVE-2026-3641
5.3
Medium
chaeypNo
2026-03-20 15:10CVE-2026-3651
5.3
Medium
Ronnachai Sretawat Na Ayutaya (Simonhaskelly)No
2026-03-20 15:10CVE-2026-3460
5.3
Medium
Ronnachai Sretawat Na Ayutaya (Simonhaskelly)No
2026-03-20 00:00CVE-2026-3567
5.3
Medium
chaeypYes
2026-03-06 11:56CVE-2026-2721
4.8
Medium
Ronnachai Chaipha (rxnr)Yes
Showing 1–10 of 12 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C