Chu Thao Mai

Chu Thao Mai is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #960 of 3,501 contributors. The disclosure was published in 2026.

Their research concentrates on Authorization Bypass Through User-Controlled Key, which accounts for 1 of their findings (25%). Other recurring categories include Cross-Site Scripting, Path Traversal. The average CVSS score across these disclosures is 5.0, peaking at 6.4.

The most affected software includes Ninja Forms - Excel Export (3), WP CTA (1), across 2 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#960

of 3,501 researchers

Vulns

Critical0

High0

Medium4

Low0

Affected Assets

2plugins

Avg CVSS

5.0

Average score of vulnerabilities

Researcher Submissions

4 records


2026-07-28 21:18	WP CTA <= 2.1.2 - Authenticated (Administrator+) Server-Side Request Forgery WP CTA 2.1.2	`CVE-2026-6089`	4.9 Medium	Nguyen Quang Truong	Yes
2026-07-16 14:42	Ninja Forms - Excel Export <= 3.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'filter' Parameter Ninja Forms - Excel Export <= 3.3.6	`CVE-2026-15161`	6.4 Medium	Chu Thao Mai	Yes
2026-07-16 13:44	Ninja Forms - Excel Export <= 3.3.6 - Missing Authorization to Authenticated (Subscriber+) XLS Write via Path Traversal Ninja Forms - Excel Export <= 3.3.6	`CVE-2026-15160`	4.3 Medium	Chu Thao Mai	Yes
2026-07-16 13:43	Ninja Forms - Excel Export <= 3.3.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Data Disclosure via 'spreadsheet_export_form_id' Parameter Ninja Forms - Excel Export <= 3.3.6	`CVE-2026-15159`	4.3 Medium	Chu Thao Mai	Yes

Showing 1–4 of 4 reports