Wordfence Intelligence   >   Vulnerability Researchers   >   Sanjorn Keeratirungsan

Sanjorn Keeratirungsan

551
All Time Ranking
8
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

About

Cybersecurity professional with 17 years of experience. Currently serving as a Red Team operator at a financial institution.

8 Vulnerabilities

WP Crowdfunding < 2.2.1 - Missing Authorization
4.3
CVE-2026-14857
Aug 14, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.20 - Unauthenticated User Account Creation
5.3
CVE-2026-13171
Aug 10, 2026
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Points and Rewards for WooCommerce < 2.10.1 - Unauthenticated Insecure Direct Object Reference
5.3
CVE-2026-11782
Aug 5, 2026
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
MotoPress Hotel Booking < 6.0.4 - Authenticated (Subscriber+) Information Exposure
4.3
CVE-2026-15235
Aug 3, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
GiveWP <= 4.16.2 - Unauthenticated Recurring Donor Information Disclosure
5.3
CVE-2026-14319
Jul 13, 2026
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
FluentCart <= 1.3.0 - Missing Authorization to Authenticated (Subscriber+) Subscription Payment Tampering
4.3
CVE-2026-14926
Jul 7, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WPS Bookings for WooCommerce <= 3.11.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Booking Order Cancellation
4.3
CVE-2026-12393
Jun 26, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WP Hotel Booking < 2.3.1 - Missing Authorization
4.3
CVE-2026-9822
Jun 19, 2026
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
WP Crowdfunding < 2.2.1 - Missing Authorization CVE-2026-14857 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N August 14, 2026
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.20 - Unauthenticated User Account Creation CVE-2026-13171 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N August 10, 2026
Points and Rewards for WooCommerce < 2.10.1 - Unauthenticated Insecure Direct Object Reference CVE-2026-11782 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N August 5, 2026
MotoPress Hotel Booking < 6.0.4 - Authenticated (Subscriber+) Information Exposure CVE-2026-15235 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N August 3, 2026
GiveWP <= 4.16.2 - Unauthenticated Recurring Donor Information Disclosure CVE-2026-14319 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N July 13, 2026
FluentCart <= 1.3.0 - Missing Authorization to Authenticated (Subscriber+) Subscription Payment Tampering CVE-2026-14926 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N July 7, 2026
WPS Bookings for WooCommerce <= 3.11.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Booking Order Cancellation CVE-2026-12393 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N June 26, 2026
WP Hotel Booking < 2.3.1 - Missing Authorization CVE-2026-9822 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N June 19, 2026

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation