Supakiad S.

Supakiad S. is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #840 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Authorization Bypass Through User-Controlled Key, which accounts for 2 of their findings (40%). Other recurring categories include Cross-Site Scripting, Deserialization Of Untrusted Data. The average CVSS score across these disclosures is 6.3, peaking at 8.1. Severity breakdown: 0 critical and 1 high.

The most affected software includes Booking Activities (1), Bus Ticket Booking with Seat Reservation (1), FV Flowplayer Video Player (1), across 5 distinct plugins, themes and core versions in total.

All 5 disclosed issues have since received a vendor fix. The most severe finding, "Booking Activities <= 1.18.7.1 - Unauthenticated PHP Object Injection", scores 8.1 out of 10.

2026

Critical

High

Medium

Low

Global Rank

#840

of 3,823 researchers

Vulns

Critical0

High1

Medium4

Low0

Affected Assets

5plugins

Avg CVSS

6.3

Average score of vulnerabilities

Researcher Submissions

5 records


2026-10-06 00:00	FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting FV Flowplayer Video Player <= 7.5.54.7212	`CVE-2026-42695`	6.4 Medium	Supakiad S.	Yes
2026-10-01 13:29	Bus Ticket Booking with Seat Reservation <= 5.9.3 - Unauthenticated Insecure Direct Object Reference Bus Ticket Booking with Seat Reservation <= 5.9.3	`CVE-2026-97251`	5.3 Medium	Supakiad S.	Yes
2026-10-01 12:02	WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.1 - Unauthenticated Insecure Direct Object Reference WPFunnels <= 3.13.1	`CVE-2026-97269`	5.3 Medium	Supakiad S.	Yes
2026-09-28 00:00	Booking Activities <= 1.18.7.1 - Unauthenticated PHP Object Injection Booking Activities <= 1.18.7.1	`CVE-2026-97248`	8.1 High	Supakiad S.	Yes
2026-09-24 00:00	SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.7.2 - Authenticated (Shop Worker+) Privilege Escalation SureCart <= 4.7.2	`CVE-2026-97245`	6.3 Medium	Supakiad S.	Yes

Showing 1–5 of 5 reports