Huynh Kien Minh

Huynh Kien Minh is a security researcher credited with 8 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #532 of 3,515 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 3 of their findings (38%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 6.4, peaking at 9.8. Severity breakdown: 2 critical and 2 high.

The most affected software includes Custom Fields Account Registration… (1), Everest Toolkit (1), JetStyleManager for Gutenberg (1), across 8 distinct plugins, themes and core versions in total.

4 of the 8 disclosed issues have a vendor fix, while 4 remain unpatched. The most severe finding, "Custom Fields Account Registration For WooCommerce <= 1.3 - Unauthenticated Privilege Escalation", scores 9.8 out of 10.

2026

Critical

High

Medium

Low

Global Rank

#532

of 3,515 researchers

Vulns

Critical2

High2

Medium4

Low0

Affected Assets

8plugins1theme

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

8 records


2026-08-31 00:00	JetStyleManager for Gutenberg < 1.3.9 - Cross-Site Request Forgery JetStyleManager for Gutenberg < 1.3.9	`CVE-2026-81432`	4.3 Medium	Huynh Kien Minh	Yes
2026-08-28 00:00	Shared Files Pro < 1.7.68 & Shared Files Free < 1.7.67 - Unauthenticated Arbitrary File Deletion Shared Files < 1.7.67	`CVE-2026-12513`	9.1 Critical	Huynh Kien Minh	Yes
2026-08-27 00:00	Real Estate Papi <= 1.0.5 - Cross-Site Request Forgery Real Estate Papi <= 1.0.5	`CVE-2026-13159`	4.3 Medium	Huynh Kien Minh	No
2026-08-24 00:00	NewPath WildApricotPress Add-on – Member Directory <= 1.0.0 - Unauthenticated Information Exposure NewPath WildApricotPress Add-on <= 1.0.0	`CVE-2026-13736`	5.3 Medium	Huynh Kien Minh	No
2026-07-17 00:00	Theme Demo Import <= 1.1.3 - Authenticated (Admin+) Arbitrary File Upload Theme Demo Import <= 1.1.3	`CVE-2026-13157`	7.2 High	Huynh Kien Minh	No
2026-07-17 00:00	Everest Toolkit <= 1.2.3 - Authenticated (Admin+) Arbitrary File Upload Everest Toolkit <= 1.2.3	`CVE-2026-13158`	7.2 High	Huynh Kien Minh	No
2026-07-06 00:00	Custom Fields Account Registration For WooCommerce <= 1.3 - Unauthenticated Privilege Escalation Custom Fields Account Registration… <= 1.3	`CVE-2026-13152`	9.8 Critical	Huynh Kien Minh	Yes
2026-06-29 00:00	MailerSend - Official SMTP Integration <= 1.0.7 - Cross-Site Request Forgery MailerSend <= 1.0.7	`CVE-2026-13156`	4.3 Medium	Huynh Kien Minh	Yes

Showing 1–8 of 8 reports