Teerachai Somprasong

Teerachai Somprasong is a security researcher credited with 16 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #313 of 3,515 contributors. The disclosure was published in 2026.

Their research concentrates on Missing Authorization, which accounts for 8 of their findings (50%). Other recurring categories include Cross-Site Scripting, Authorization Bypass Through User-Controlled Key. The average CVSS score across these disclosures is 5.8, peaking at 8.6. Severity breakdown: 0 critical and 5 high.

The most affected software includes Magic Import Document Extractor (2), ShopLentor (2), Age Verification & Identity… (1), across 14 distinct plugins, themes and core versions in total.

15 of the 16 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "ShopLentor <= 3.3.2 - Unauthenticated Email Relay Abuse via 'woolentor_suggest_price_action' AJAX Action", scores 8.6 out of 10.

2026

Critical

High

Medium

Low

Global Rank

#313

of 3,515 researchers

Vulns

Critical0

High5

Medium11

Low0

Affected Assets

14plugins

Avg CVSS

5.8

Average score of vulnerabilities

Researcher Submissions

16 records


2026-08-04 18:38	ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST API ShopLentor <= 3.3.7	`CVE-2026-6020`	7.2 High	Itthidej Aramsri (Boeing777)	Yes
2026-06-18 17:50	STRABL <= 4.5 - Unauthenticated Arbitrary Webhook Creation via REST API Endpoint STRABL <= 4.5	`CVE-2026-3640`	5.3 Medium	Teerachai Somprasong	Yes
2026-06-05 10:26	Alba Board <= 2.1.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'card_id' Parameter Alba Board <= 2.1.3	`CVE-2026-7523`	4.3 Medium	Teerachai Somprasong	Yes
2026-05-01 00:00	My Social Feeds <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'ttp_get_accounts' AJAX Action My Social Feeds <= 1.0.4	`CVE-2026-6446`	5.4 Medium	Teerachai Somprasong	Yes
2026-04-23 14:43	Maxi Blocks <= 2.1.8 - Missing Authorization to Authenticated (Author+) Media File Deletion via 'old_media_src' Parameter MaxiBlocks Builder <= 2.1.8	`CVE-2026-2028`	5.3 Medium	Teerachai Somprasong	Yes
2026-04-14 11:34	Age Verification & Identity Verification by Token of Trust <= 3.32.3 - Unauthenticated Stored Cross-Site Scripting via 'description' Parameter Age Verification & Identity… <= 3.32.3	`CVE-2026-2834`	7.2 High	Teerachai Somprasong	Yes
2026-03-16 11:29	WowStore – Store Builder & Product Blocks for WooCommerce <= 4.4.3 - Unauthenticated SQL Injection via 'search' Parameter WowStore <= 4.4.3	`CVE-2026-2579`	7.5 High	Itthidej Aramsri (Boeing777)	Yes
2026-02-17 16:06	ShopLentor <= 3.3.2 - Unauthenticated Email Relay Abuse via 'woolentor_suggest_price_action' AJAX Action ShopLentor <= 3.3.2	`CVE-2026-1714`	8.6 High	Teerachai Somprasong	Yes
2026-02-10 20:09	Invoct – PDF Invoices & Billing for WooCommerce <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Information Exposure Invoct <= 1.6	`CVE-2026-1748`	4.3 Medium	Teerachai Somprasong	Yes
2026-02-03 19:32	Magic Import Document Extractor <= 1.0.6 - Unauthenticated Sensitive Information Exposure Magic Import Document Extractor <= 1.0.6	`CVE-2025-15508`	5.3 Medium	Teerachai Somprasong	No

Showing 1–10 of 16 reports