Ronnachai Sretawat Na Ayutaya (Simonhaskelly)

2026

Critical

High

Medium

Low

Global Rank

#357

of 3,248 researchers

Vulns

12

Critical0

High3

Medium9

Low0

Affected Assets

11

11plugins

Avg CVSS

6.1

Average score of vulnerabilities

Researcher Submissions

12 records


2026-07-10 14:43	Planyo online reservation system <= 3.0 - Unauthenticated Server-Side Request Forgery via 'ulap_url' Parameter Planyo online reservation system <= 3.0	`CVE-2026-3576`	7.2 High	chaeyp	Yes
2026-05-11 19:04	Shortcodely <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'widget_area' Shortcode Attribute Shortcodely <= 1.0.1	`CVE-2026-6913`	6.4 Medium	chaeyp	No
2026-04-14 19:47	Accessibly <= 3.0.3 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via Widget Source Injection via REST API Accessibly <= 3.0.3	`CVE-2026-3643`	7.2 High	chaeyp	No
2026-04-07 15:48	Strong Testimonials <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via testimonial_view Shortcode Strong Testimonials <= 3.2.21	`CVE-2026-3239`	6.4 Medium	Ronnachai Sretawat Na Ayutaya (Simonhaskelly)	Yes
2026-03-20 15:14	CMS Commander <= 2.288 - Authenticated (Custom+) SQL Injection via 'or_blogname' Parameter CMS Commander <= 2.288	`CVE-2026-3334`	8.8 High	chaeyp	No
2026-03-20 15:10	Appmax <= 1.0.3 - Missing Authorization to Order Status Manipulation and Arbitrary Order Creation via Webhook Endpoint Appmax <= 1.0.3	`CVE-2026-3641`	5.3 Medium	chaeyp	No
2026-03-20 15:10	Build App Online <= 1.0.23 - Missing Authorization to Arbitrary Post Author Modification via 'build-app-online-update-vendor-product' AJAX Action Build App Online <= 1.0.23	`CVE-2026-3651`	5.3 Medium	Ronnachai Sretawat Na Ayutaya (Simonhaskelly)	No
2026-03-20 15:10	REST API TO MiniProgram <= 5.1.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'userid' REST API Parameter REST API TO MiniProgram <= 5.1.2	`CVE-2026-3460`	5.3 Medium	Ronnachai Sretawat Na Ayutaya (Simonhaskelly)	No
2026-03-20 00:00	RepairBuddy <= 4.1132 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Modification via wc_rep_shop_settings_submission AJAX Action RepairBuddy <= 4.1132	`CVE-2026-3567`	5.3 Medium	chaeyp	Yes
2026-03-06 11:30	Stock Ticker <= 3.26.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Template Stock Ticker <= 3.26.1	`CVE-2026-2722`	4.8 Medium	chaeyp	Yes

Showing 1–10 of 12 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C