Vilaysone CHANTHAVONG (0xJ0cKkY)

2026

Critical

High

Medium

Low

Global Rank

#676

of 3,238 researchers

Vulns

5

Critical1

High2

Medium2

Low0

Affected Assets

5

5plugins

Avg CVSS

7.4

Average score of vulnerabilities

Researcher Submissions

5 records


2026-04-20 07:57	Image Source Control Lite – Show Image Credits and Captions <= 3.9.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'Image Source' Field Image Source Control Lite <= 3.9.1	`CVE-2026-4852`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2026-04-13 16:33	Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts <= 3.0.12 - Authenticated (Administrator+) PHP Object Injection Smart Post <= 3.0.12	`CVE-2026-3017`	7.2 High	Vilaysone CHANTHAVONG (0xJ0cKkY)	Yes
2026-04-08 14:35	Quick Playground <= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Upload Quick Playground <= 1.3.1	`CVE-2026-1830`	9.8 Critical	Athiwat Tiprasaharn (Jitlada)	Yes
2026-02-18 15:53	Advance Block Extend <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via TitleColor Block Attribute Advance Block Extend <= 1.0.4	`CVE-2026-1646`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	No
2026-01-23 19:20	Frontis Blocks <= 1.1.6 - Unauthenticated Server-Side Request Forgery via 'url' Parameter Frontis Blocks <= 1.1.6	`CVE-2026-0807`	7.2 High	Itthidej Aramsri (Boeing777)	Yes

Showing 1–5 of 5 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C