Varakorn Chanthasri (iCreaM)

20252026

Critical

High

Medium

Low

Global Rank

#422

of 3,238 researchers

Vulns

10

Critical0

High4

Medium6

Low0

Affected Assets

10

10plugins

Avg CVSS

6.2

Average score of vulnerabilities

Researcher Submissions

10 records


2026-02-18 16:21	WP Customer Reviews <= 3.7.5 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter WP Customer Reviews <= 3.7.5	`CVE-2025-14452`	7.2 High	Athiwat Tiprasaharn (Jitlada)	Yes
2026-02-04 20:41	All In One Image Viewer Block <= 1.0.2 - Unauthenticated Server-Side Request Forgery via image-proxy Endpoint All In One Image Viewer <= 1.0.2	`CVE-2026-1294`	7.2 High	Athiwat Tiprasaharn (Jitlada)	Yes
2026-01-27 17:21	TableMaster for Elementor <= 1.3.6 - Authenticated (Author+) Server-Side Request Forgery via 'csv_url' Parameter TableMaster for Elementor <= 1.3.6	`CVE-2025-14610`	7.2 High	Athiwat Tiprasaharn (Jitlada)	Yes
2026-01-13 16:43	SearchWiz <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title SearchWiz <= 1.0.0	`CVE-2026-0694`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	No
2025-12-20 14:53	Image Photo Gallery Final Tiles Grid <= 3.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'Custom Scripts' Setting Image Photo Gallery Final Tiles Grid <= 3.6.8	`CVE-2025-13693`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2025-12-15 02:22	Image Gallery – Photo Grid & Video Gallery <= 2.13.3 - Missing Authorization to Authenticated (Author+) Arbitrary Gallery Modification Modula Image Gallery <= 2.13.3	`CVE-2025-14003`	4.3 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2025-12-12 16:04	Eyewear prescription form <= 7.0.2 - Missing Authorization to Unauthenticated Arbitrary WooCommerce Product Creation Eyewear prescription form <= 7.0.2	`CVE-2025-14366`	5.3 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2025-12-11 18:31	WPNakama <= 0.6.3 - Unauthenticated SQL Injection via 'order_by' Parameter WPNakama <= 0.6.3	`CVE-2025-14068`	7.5 High	Athiwat Tiprasaharn (Jitlada)	Yes
2025-12-11 14:32	WPMasterToolKit (WPMTK) <= 2.13.0 - Authenticated (Contributor+) Code Injection WPMasterToolKit (WPMTK) <= 2.13.0	`CVE-2025-14166`	5.3 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2025-11-21 19:24	IDonate – Blood Donation, Request And Donor Management System <= 2.1.15 - Missing Authorization to Unauthenticated Arbitrary Post Deletion IDonate <= 2.1.14	`CVE-2025-12877`	5.3 Medium	Varakorn Chanthasri (iCreaM)	Yes

Showing 1–10 of 10 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C