Waris Damkham

20252026

Critical

High

Medium

Low

Global Rank

#186

of 3,238 researchers

Vulns

28

Critical4

High9

Medium15

Low0

Affected Assets

27

27plugins

Avg CVSS

7.1

Average score of vulnerabilities

Researcher Submissions

28 records


2026-04-08 14:35	Quick Playground <= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Upload Quick Playground <= 1.3.1	`CVE-2026-1830`	9.8 Critical	Athiwat Tiprasaharn (Jitlada)	Yes
2026-03-20 15:17	Easy Image Gallery <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Shortcode Post Meta Easy Image Gallery <= 1.5.3	`CVE-2026-4766`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	No
2026-03-20 15:15	Hr Press Lite <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Employee Information Exposure HR Press Lite <= 1.0.2	`CVE-2026-2720`	6.5 Medium	Itthidej Aramsri (Boeing777)	No
2026-03-17 00:00	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.0.4 - Authenticated (Author+) Local File Inclusion Photo Gallery <= 4.0.4	`CVE-2026-1463`	8.8 High	Athiwat Tiprasaharn (Jitlada)	Yes
2026-03-16 11:29	WowStore – Store Builder & Product Blocks for WooCommerce <= 4.4.3 - Unauthenticated SQL Injection via 'search' Parameter WowStore <= 4.4.3	`CVE-2026-2579`	7.5 High	Itthidej Aramsri (Boeing777)	Yes
2026-03-06 11:46	JS Archive List <= 6.1.7 - Authenticated (Contributor+) PHP Object Injection via 'included' Shortcode Attribute JS Archive List <= 6.1.7	`CVE-2026-2020`	7.5 High	Athiwat Tiprasaharn (Jitlada)	Yes
2026-03-04 00:00	WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation <= 1.4.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation WowOptin: Next-Gen Popup Maker <= 1.4.24	`CVE-2026-1720`	8.8 High	Itthidej Aramsri (Boeing777)	Yes
2026-03-03 20:19	Envira Gallery for WordPress <= 1.12.3 - Authenticated (Author+) Stored Cross-Site Scripting via 'justified_gallery_theme' Parameter via REST API Envira Gallery <= 1.12.3	`CVE-2026-1236`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2026-02-18 16:21	WP Customer Reviews <= 3.7.5 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter WP Customer Reviews <= 3.7.5	`CVE-2025-14452`	7.2 High	Athiwat Tiprasaharn (Jitlada)	Yes
2026-02-18 15:52	Prodigy Commerce <= 3.3.0 - Unauthenticated Local File Inclusion via parameters[template_name] Prodigy Commerce <= 3.3.0	`CVE-2026-0926`	9.8 Critical	Athiwat Tiprasaharn (Jitlada)	Yes

Showing 1–10 of 28 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C