Tharadol Suksamran (d3kc4rt_1)

2026

Critical

High

Medium

Low

Global Rank

#379

of 3,238 researchers

Vulns

11

Critical0

High2

Medium9

Low0

Affected Assets

11

11plugins

Avg CVSS

6.3

Average score of vulnerabilities

Researcher Submissions

11 records


2026-07-01 20:04	My Calendar <= 3.7.14 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'vcal' Parameter My Calendar <= 3.7.14	`CVE-2026-11896`	5.3 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2026-05-13 17:16	GLS Shipping for WooCommerce <= 1.4.0 - Reflected Cross-Site Scripting via 'failed_orders' GLS Shipping for WooCommerce <= 1.4.0	`CVE-2026-6417`	6.1 Medium	Tharadol Suksamran (d3kc4rt_1)	Yes
2026-04-17 21:16	Categories Images <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'z_taxonomy_image' Shortcode Categories Images <= 3.3.1	`CVE-2026-2505`	5.4 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2026-04-17 11:35	Youzify <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'checkin_place_id' Parameter Youzify <= 1.3.6	`CVE-2026-1559`	6.4 Medium	Tharadol Suksamran (d3kc4rt_1)	Yes
2026-04-07 22:31	Beaver Builder Page Builder – Drag and Drop Website Builder <= 2.10.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'settings[js]' Beaver Builder Page Builder <= 2.10.1.1	`CVE-2026-2481`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2026-03-20 10:58	Contact List <= 3.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_cl_map_iframe' Parameter Contact List <= 3.0.18	`CVE-2026-3516`	6.4 Medium	Tharadol Suksamran (d3kc4rt_1)	Yes
2026-03-09 21:26	Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields Unlimited Elements For Elementor <= 2.0.5	`CVE-2026-2724`	7.2 High	Athiwat Tiprasaharn (Jitlada)	Yes
2026-02-16 17:29	EventPrime <= 4.2.8.4 - Missing Authorization to Unauthenticated Image Upload via 'ep_upload_file_media' AJAX Endpoint EventPrime <= 4.2.8.4	`CVE-2026-1657`	5.3 Medium	Tharadol Suksamran (d3kc4rt_1)	Yes
2026-02-03 19:44	MyRewards – Loyalty Points and Rewards for WooCommerce <= 5.6.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Loyalty Rule Modification MyRewards <= 5.6.1	`CVE-2025-15260`	6.5 Medium	Tharadol Suksamran (d3kc4rt_1)	Yes
2026-02-02 18:41	Tutor LMS <= 3.9.5 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Course Modification and Deletion Tutor LMS <= 3.9.5	`CVE-2026-1375`	8.1 High	Athiwat Tiprasaharn (Jitlada)	Yes

Showing 1–10 of 11 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C