Huy Nguyen

Huy Nguyen is a security researcher credited with 11 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #415 of 3,515 contributors. Their disclosures were published between 2021 and 2022. The most productive year was 2021, with 10 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 11 of their findings (100%). The average CVSS score across these disclosures is 5.2, peaking at 5.5.

The most affected software includes Advanced Access Manager (1), BetterLinks (1), Connections Business Directory (1), across 11 distinct plugins, themes and core versions in total.

All 11 disclosed issues have since received a vendor fix.

20212022

Critical

High

Medium

Low

Global Rank

#415

of 3,515 researchers

Vulns

Critical0

High0

Medium11

Low0

Affected Assets

11plugins

Avg CVSS

5.2

Average score of vulnerabilities

Researcher Submissions

11 records


2022-02-14 00:00	WP Event Manager <= 3.1.22 - Admin+ Stored Cross-Site Scripting WP Event Manager <= 3.1.22	`CVE-2021-24810`	4.8 Medium	Huy Nguyen	Yes
2021-12-01 00:00	WP Travel Engine <= 5.3.0 - Editor+ Stored Cross-Site Scripting WP Travel Engine <= 5.3.0	`CVE-2021-24680`	5.5 Medium	Huy Nguyen	Yes
2021-11-02 00:00	Import any XML or CSV File to WordPress <= 3.6.2 - Authenticated Stored Cross-Site Scripting WP All Import < 3.6.3	`CVE-2021-24714`	4.8 Medium	Huy Nguyen	Yes
2021-11-01 00:00	WP RSS Aggregator <= 4.19.1 - Admin+ Stored Cross-Site Scripting WP RSS Aggregator <= 4.19.1	`CVE-2021-24768`	4.8 Medium	Huy Nguyen	Yes
2021-10-20 00:00	BetterLinks – Shorten, Track and Manage any URL <= 1.2.5 - Stored Cross-Site Scripting BetterLinks < 1.2.6	`CVE-2021-24812`	5.4 Medium	Huy Nguyen	Yes
2021-10-19 00:00	Advanced Access Manager <= 6.7.9 - Admin+ Stored Cross-Site Scripting Advanced Access Manager < 6.8.0	`CVE-2021-24830`	4.8 Medium	Huy Nguyen	Yes
2021-10-06 00:00	WP All Export <= 1.3.0 - Admin+ Stored Cross-Site Scripting WP All Export < 1.3.1	`CVE-2021-24708`	4.8 Medium	Huy Nguyen	Yes
2021-10-04 00:00	Events Made Easy <= 2.2.23 - Admin+ Stored Cross-Site Scripting Events Made Easy < 2.2.24	`CVE-2021-24813`	5.5 Medium	Huy Nguyen	Yes
2021-09-29 00:00	WordPress Download Manager <= 3.2.15 - Cross-Site Scripting Download Manager < 3.2.16	`CVE-2021-24773`	5.5 Medium	Huy Nguyen	Yes
2021-09-29 00:00	WPeMatico RSS Feed Fetcher <= 2.6.11 - Admin+ Stored Cross-Site Scripting WPeMatico RSS Feed Fetcher < 2.6.12	`CVE-2021-24793`	5.5 Medium	Huy Nguyen	Yes

Showing 1–10 of 11 reports