Chien Vuong

Chien Vuong is a security researcher credited with 10 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #445 of 3,515 contributors. Their disclosures were published between 2022 and 2023. The most productive year was 2023, with 9 findings.

Their research concentrates on SQL Injection, which accounts for 7 of their findings (70%). Other recurring categories include Cross-Site Scripting, Path Traversal. The average CVSS score across these disclosures is 6.5, peaking at 9.1. Severity breakdown: 1 critical and 3 high.

The most affected software includes WP Custom Cursors (2), All In One Redirection (1), Custom 404 Pro (1), across 9 distinct plugins, themes and core versions in total.

8 of the 10 disclosed issues have a vendor fix, while 2 remain unpatched. The most severe finding, "WP Custom Cursors <= 3.1 - Authenticated (Admin+) SQL Injection", scores 9.1 out of 10.

20222023

Critical

High

Medium

Low

Global Rank

#445

of 3,515 researchers

Vulns

Critical1

High3

Medium5

Low1

Affected Assets

9plugins

Avg CVSS

6.5

Average score of vulnerabilities

Researcher Submissions

10 records


2023-06-19 00:00	All In One Redirection <= 2.1.0 - Authenticated(Administrator+) SQL Injection All In One Redirection <= 2.1.0	`CVE-2023-2493`	6.6 Medium	Chien Vuong	Yes
2023-06-05 00:00	Responsive CSS EDITOR <= 1.0 - Authenticated(Administrator+) SQL Injection Responsive CSS EDITOR <= 1.0	`CVE-2023-2482`	6.6 Medium	Chien Vuong	No
2023-06-05 00:00	FormCraft Premium <= 3.9.6 - Authenticated(Administrator+) SQL Injection FormCraft <= 3.9.5	`CVE-2023-2592`	6.6 Medium	Chien Vuong	Yes
2023-05-26 00:00	QueryWall <= 1.1.1 - Authenticated (Administrator+) SQL Injection QueryWall <= 1.1.1	`CVE-2023-2492`	7.2 High	Chien Vuong	No
2023-05-24 00:00	WP Custom Cursors <= 3.1 - Authenticated (Admin+) SQL Injection WP Custom Cursors <= 3.1	`CVE-2023-2221`	9.1 Critical	Chien Vuong	Yes
2023-05-22 00:00	Integration for Contact Form 7 and Zoho CRM, Bigin <= 1.2.3 - Authenticated (Admin+) SQL Injection WP Zoho for Contact Form 7 <= 1.2.3	`CVE-2023-2527`	7.2 High	Chien Vuong	Yes
2023-05-02 00:00	Custom 404 Pro <= 3.7.2 - Reflected Cross-Site Scripting via 's' Custom 404 Pro <= 3.7.2	`CVE-2023-2023`	6.1 Medium	Chien Vuong	Yes
2023-05-02 00:00	Image Optimizer by 10web <= 1.0.26 - Authenticated(Administator+) Directory Traversal Image Optimizer by 10web <= 1.0.26	`CVE-2023-2117`	2.7 Low	Chien Vuong	Yes
2023-04-18 00:00	Thumbnail carousel slider <= 1.1.9 - Reflected Cross-Site Scripting Responsive Thumbnail Slider < 1.1.10	`CVE-2023-1915`	6.1 Medium	Chien Vuong	Yes
2022-09-21 00:00	WP Custom Cursors <= 3.0.1 - Authenticated (Administrator+) SQL Injection WP Custom Cursors <= 3.0.2	`CVE-2022-3150`	7.2 High	István Márton	Yes

Showing 1–10 of 10 reports