Cút lộn xào me

Cút lộn xào me is a security researcher credited with 14 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #337 of 3,515 contributors. The disclosure was published in 2025.

Their research concentrates on SQL Injection, which accounts for 4 of their findings (29%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type, Missing Authorization. The average CVSS score across these disclosures is 8.1, peaking at 9.8. Severity breakdown: 4 critical and 6 high.

The most affected software includes WPCHURCH - Church Management System… (3), Hospital Management System for Wordpress (2), Bus Ticket Booking with Seat… (1), across 11 distinct plugins, themes and core versions in total.

5 of the 14 disclosed issues have a vendor fix, while 9 remain unpatched. The most severe finding, "Course Builder - Online Course WordPress Theme < 3.6.6 - Unauthenticated PHP Object Injection", scores 9.8 out of 10.

2025

Critical

High

Medium

Low

Global Rank

#337

of 3,515 researchers

Vulns

Critical4

High6

Medium4

Low0

Affected Assets

10plugins1theme

Avg CVSS

8.1

Average score of vulnerabilities

Researcher Submissions

14 records


2025-05-30 00:00	MaxiBlocks <= 2.1.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Options Update MaxiBlocks Builder <= 2.1.0	`CVE-2025-47601`	8.8 High	Cút lộn xào me	Yes
2025-05-30 00:00	WPCHURCH <= 2.7.0 - Authenticated (Subscriber+) Privilege Escalation WPCHURCH - Church Management System… <= 2.7.0	`CVE-2025-31643`	8.8 High	Cút lộn xào me	No
2025-05-29 00:00	Course Builder - Online Course WordPress Theme < 3.6.6 - Unauthenticated PHP Object Injection Course Builder - Online Course… < 3.6.6	`CVE-2025-48336`	9.8 Critical	Cút lộn xào me	Yes
2025-05-22 00:00	Bus Ticket Booking with Seat Reservation for WooCommerce <= 1.7 - Unauthenticated SQL Injection Bus Ticket Booking with Seat… <= 1.7	`CVE-2025-31397`	7.5 High	Cút lộn xào me	No
2025-05-22 00:00	Hospital Management System <= 47.0(20-11-2023) - Authenticated (Subscriber+) Privilege Escalation Hospital Management System for Wordpress <= 47.0(20-11-2023)	`CVE-2025-47631`	8.8 High	Cút lộn xào me	No
2025-05-21 00:00	JP Students Result Management System Premium 1.1.7 - Unauthenticated Arbitrary File Upload JP Students Result Management System… 1.1.7	`CVE-2025-31916`	9.8 Critical	Cút lộn xào me	No
2025-05-20 00:00	Hospital Management System <= 47.0(20-11-2023) - Authenticated (Subscriber+) Arbitrary File Upload Hospital Management System for Wordpress <= 47.0(20-11-2023)	`CVE-2025-47663`	8.8 High	Cút lộn xào me	No
2025-05-20 00:00	WPCHURCH <= 2.7.0 - Reflected Cross-Site Scripting WPCHURCH - Church Management System… <= 2.7.0	`CVE-2025-31642`	6.1 Medium	Cút lộn xào me	No
2025-05-20 00:00	School Management <= 92.0.0 - Authenticated (Subscriber+) SQL Injection School Management System for Wordpress <= 92.0.0	`CVE-2025-47575`	6.5 Medium	Cút lộn xào me	No
2025-05-19 00:00	GDPR CCPA Compliance Support <= 2.7.3 - Missing Authorization GDPR CCPA Compliance & Cookie Consent… <= 2.7.3	`CVE-2025-48260`	4.3 Medium	Cút lộn xào me	Yes

Showing 1–10 of 14 reports