Sarawut Poolkhet (MisterHelloz)

20252026

Critical

High

Medium

Low

Global Rank

#304

of 3,238 researchers

Vulns

15

Critical1

High6

Medium8

Low0

Affected Assets

14

14plugins

Avg CVSS

6.8

Average score of vulnerabilities

Researcher Submissions

15 records


2026-05-30 14:23	Advanced Custom Fields (ACF®) <= 6.8.1 - Unauthenticated Arbitrary Post Modification via Front-End Form '_post_title' and '_post_content' Parameters Advanced Custom Fields (ACF®) <= 6.8.1	`CVE-2026-8382`	5.3 Medium	Sarawut Poolkhet (MisterHelloz)	Yes
2026-05-27 00:00	Advanced Custom Fields (ACF®) <= 6.8.1 - Missing Authorization Advanced Custom Fields (ACF®) <= 6.8.1	`N/A`	5.3 Medium	Sarawut Poolkhet (MisterHelloz)	Yes
2026-03-10 13:11	MC4WP: Mailchimp for WordPress <= 4.11.1 - Missing Authorization to Unauthenticated Arbitrary Subscription Deletion MC4WP <= 4.11.1	`CVE-2026-1781`	6.5 Medium	Sarawut Poolkhet (MisterHelloz)	Yes
2026-02-07 12:47	JAY Login & Register <= 2.6.03 - Authenticated (Subscriber+) Privilege Escalation via jay_panel_ajax_update_profile JAY Login & Register <= 2.6.03	`CVE-2025-15100`	8.8 High	Sarawut Poolkhet (MisterHelloz)	Yes
2026-01-30 00:00	Sell BTC - Cryptocurrency Selling Calculator <= 1.5 - Unauthenticated Stored Cross-Site Scripting via 'orderform_data' AJAX Action Sell BTC by Hayyat Apps <= 1.5	`CVE-2025-14554`	7.2 High	Sarawut Poolkhet (MisterHelloz)	Yes
2026-01-27 00:00	Snow Monkey Forms <= 12.0.3 - Unauthenticated Arbitrary File Deletion via Path Traversal Snow Monkey Forms <= 12.0.3	`CVE-2026-1056`	9.8 Critical	Sarawut Poolkhet (MisterHelloz)	Yes
2026-01-23 23:36	WP Directory Kit <= 1.4.9 - Unauthenticated Email Exposure via wdk_public_action WP Directory Kit <= 1.4.9	`CVE-2025-13920`	5.3 Medium	Sarawut Poolkhet (MisterHelloz)	Yes
2026-01-22 17:11	KiviCare – Clinic & Patient Management System (EHR) <= 3.6.15 - Missing Authorization to Unauthenticated Limited Arbitrary File Upload KiviCare <= 3.6.15	`CVE-2026-0927`	5.3 Medium	Sarawut Poolkhet (MisterHelloz)	Yes
2026-01-22 00:00	Melapress Role Editor <= 1.1.1 - Improper Authorization to Authenticated (Subscriber+) Privilege Escalation via Secondary Role Assignment Melapress Role Editor <= 1.1.1	`CVE-2025-14866`	8.8 High	Sarawut Poolkhet (MisterHelloz)	Yes
2026-01-20 01:48	Creator LMS – The LMS for Creators, Coaches, and Trainers <= 1.1.12 - Missing Authorization to Authenticated (Contributor+) Arbitrary Options Update Creator LMS <= 1.1.12	`CVE-2025-15347`	8.8 High	Sarawut Poolkhet (MisterHelloz)	Yes

Showing 1–10 of 15 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C