Teerachai Somprasong

Teerachai Somprasong is a security researcher credited with 18 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #318 of 3,878 contributors. The disclosure was published in 2026.

Their research concentrates on Missing Authorization, which accounts for 9 of their findings (50%). Other recurring categories include Cross-Site Scripting, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 5.7, peaking at 8.6. Severity breakdown: 0 critical and 5 high.

The most affected software includes Magic Import Document Extractor (2), ShopLentor (2), WP-CRM System (2), across 15 distinct plugins, themes and core versions in total.

17 of the 18 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "ShopLentor <= 3.3.2 - Unauthenticated Email Relay Abuse via 'woolentor_suggest_price_action' AJAX Action", scores 8.6 out of 10.

2026

Critical

High

Medium

Low

Global Rank

#318

of 3,878 researchers

Vulns

Critical0

High5

Medium13

Low0

Affected Assets

15plugins

Avg CVSS

5.7

Average score of vulnerabilities

Researcher Submissions

18 records


2026-10-09 17:49	CV Builder – Professional Resume Builder SaaS <= 1.3.1 - Missing Authorization to Unauthenticated PNG File Upload WP CV Builder <= 1.3.1	`CVE-2026-3717`	5.3 Medium	Teerachai Somprasong	Yes
2026-09-21 19:26	WP-CRM System <= 3.4.6 - Authenticated (Contributor+) Exposure of Sensitive Information via 'contact_id' Parameter WP-CRM System <= 3.4.6	`CVE-2026-9004`	4.3 Medium	Teerachai Somprasong	Yes
2026-08-04 18:38	ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST API ShopLentor <= 3.3.7	`CVE-2026-6020`	7.2 High	Itthidej Aramsri (Boeing777)	Yes
2026-06-18 17:50	STRABL <= 4.5 - Unauthenticated Arbitrary Webhook Creation via REST API Endpoint STRABL <= 4.5	`CVE-2026-3640`	5.3 Medium	Teerachai Somprasong	Yes
2026-06-05 10:26	Alba Board <= 2.1.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'card_id' Parameter Task & Project Management <= 2.1.3	`CVE-2026-7523`	4.3 Medium	Teerachai Somprasong	Yes
2026-05-01 00:00	My Social Feeds <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'ttp_get_accounts' AJAX Action My Social Feeds <= 1.0.4	`CVE-2026-6446`	5.4 Medium	Teerachai Somprasong	Yes
2026-04-23 14:43	Maxi Blocks <= 2.1.8 - Missing Authorization to Authenticated (Author+) Media File Deletion via 'old_media_src' Parameter MaxiBlocks Builder <= 2.1.8	`CVE-2026-2028`	5.3 Medium	Teerachai Somprasong	Yes
2026-04-14 11:34	Age Verification & Identity Verification by Token of Trust <= 3.32.3 - Unauthenticated Stored Cross-Site Scripting via 'description' Parameter Age Verification & Identity… <= 3.32.3	`CVE-2026-2834`	7.2 High	Teerachai Somprasong	Yes
2026-03-16 11:29	WowStore – Store Builder & Product Blocks for WooCommerce <= 4.4.3 - Unauthenticated SQL Injection via 'search' Parameter WowStore <= 4.4.3	`CVE-2026-2579`	7.5 High	Itthidej Aramsri (Boeing777)	Yes
2026-02-17 16:06	ShopLentor <= 3.3.2 - Unauthenticated Email Relay Abuse via 'woolentor_suggest_price_action' AJAX Action ShopLentor <= 3.3.2	`CVE-2026-1714`	8.6 High	Teerachai Somprasong	Yes

Showing 1–10 of 18 reports