Huynh Kien Minh

Huynh Kien Minh is a security researcher credited with 11 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #449 of 3,899 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 4 of their findings (36%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type, Path Traversal. The average CVSS score across these disclosures is 7.1, peaking at 9.8. Severity breakdown: 3 critical and 4 high.

The most affected software includes Custom Fields Account Registration… (1), DS Ad Rotator (1), Everest Toolkit (1), across 11 distinct plugins, themes and core versions in total.

4 of the 11 disclosed issues have a vendor fix, while 7 remain unpatched. The most severe finding, "DS Ad Rotator <= 0.8 - Unauthenticated Arbitrary File Upload", scores 9.8 out of 10.

2026

Critical

High

Medium

Low

Global Rank

#449

of 3,899 researchers

Vulns

Critical3

High4

Medium4

Low0

Affected Assets

11plugins1theme

Avg CVSS

7.1

Average score of vulnerabilities

Researcher Submissions

11 records


2026-09-14 00:00	DS Ad Rotator <= 0.8 - Unauthenticated Arbitrary File Upload DS Ad Rotator <= 0.8	`CVE-2026-81402`	9.8 Critical	Huynh Kien Minh	No
2026-09-14 00:00	Yogeta WP Cloud <= 1.0 - Unauthenticated Arbitrary File Read Yogeta WP Cloud <= 1.0	`CVE-2026-80494`	7.5 High	Huynh Kien Minh	No
2026-09-10 00:00	Gpx2Graphics <= 0.3 - Cross-Site Request Forgery to Arbitrary File Upload Gpx2Graphics <= 0.3	`CVE-2026-81090`	8.8 High	Huynh Kien Minh	No
2026-08-31 00:00	JetStyleManager for Gutenberg < 1.3.9 - Cross-Site Request Forgery JetStyleManager for Gutenberg < 1.3.9	`CVE-2026-81432`	4.3 Medium	Huynh Kien Minh	Yes
2026-08-28 00:00	Shared Files Pro < 1.7.68 & Shared Files Free < 1.7.67 - Unauthenticated Arbitrary File Deletion Shared Files < 1.7.67	`CVE-2026-12513`	9.1 Critical	Huynh Kien Minh	Yes
2026-08-27 00:00	Real Estate Papi <= 1.0.5 - Cross-Site Request Forgery Real Estate Papi <= 1.0.5	`CVE-2026-13159`	4.3 Medium	Huynh Kien Minh	No
2026-08-24 00:00	NewPath WildApricotPress Add-on – Member Directory <= 1.0.0 - Unauthenticated Information Exposure NewPath WildApricotPress Add-on <= 1.0.0	`CVE-2026-13736`	5.3 Medium	Huynh Kien Minh	No
2026-07-17 00:00	Theme Demo Import <= 1.1.3 - Authenticated (Admin+) Arbitrary File Upload Theme Demo Import <= 1.1.3	`CVE-2026-13157`	7.2 High	Huynh Kien Minh	No
2026-07-17 00:00	Everest Toolkit <= 1.2.3 - Authenticated (Admin+) Arbitrary File Upload Everest Toolkit <= 1.2.3	`CVE-2026-13158`	7.2 High	Huynh Kien Minh	No
2026-07-06 00:00	Custom Fields Account Registration For WooCommerce <= 1.3 - Unauthenticated Privilege Escalation Custom Fields Account Registration… <= 1.3	`CVE-2026-13152`	9.8 Critical	Huynh Kien Minh	Yes

Showing 1–10 of 11 reports