Huynh Tien Si

Huynh Tien Si is a security researcher credited with 19 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #275 of 3,515 contributors. Their disclosures were published between 2023 and 2024. The most productive year was 2023, with 11 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 11 of their findings (58%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization. The average CVSS score across these disclosures is 4.7, peaking at 6.4.

The most affected software includes Icegram Engage (2), Advanced Flamingo (1), Brave (1), across 18 distinct plugins, themes and core versions in total.

17 of the 19 disclosed issues have a vendor fix, while 2 remain unpatched.

20232024

Critical

High

Medium

Low

Global Rank

#275

of 3,515 researchers

Vulns

Critical0

High0

Medium19

Low0

Affected Assets

18plugins

Avg CVSS

4.7

Average score of vulnerabilities

Researcher Submissions

19 records


2024-06-27 00:00	Easy Age Verify <= 1.8.2 - Authenticated (Admin+) Stored Cross-Site Scripting Easy Age Verify <= 1.8.2	`CVE-2024-35757`	4.4 Medium	Huynh Tien Si	Yes
2024-05-07 00:00	Form Maker by 10Web <= 1.15.24 - Authenticated (Administrator+) Stored Cross-Site Scripting Form Maker by 10Web <= 1.15.24	`CVE-2024-34437`	4.4 Medium	Huynh Tien Si	Yes
2024-05-06 00:00	WP Favorite Posts <= 1.6.8 - Cross-Site Request Forgery WP Favorite Posts <= 1.6.8	`CVE-2024-34427`	4.3 Medium	Huynh Tien Si	No
2024-03-15 00:00	WP Popups <= 2.1.5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting WP Popups <= 2.1.5.5	`CVE-2024-29105`	4.4 Medium	Huynh Tien Si	Yes
2024-02-02 00:00	WP Dummy Content Generator <= 3.1.2 - Missing Authorization WP Dummy Content Generator <= 3.1.2	`CVE-2024-24805`	5.3 Medium	Huynh Tien Si	Yes
2024-01-31 00:00	MW WP Form <= 5.0.6 - Authenticated (Editor+) Stored Cross-Site Scripting MW WP Form <= 5.0.6	`CVE-2024-24804`	5.5 Medium	Huynh Tien Si	Yes
2024-01-08 00:00	Advanced Flamingo <= 1.0 - Cross-Site Request Forgery Advanced Flamingo <= 1.0	`CVE-2023-52226`	4.3 Medium	Huynh Tien Si	No
2024-01-05 00:00	Icegram <= 3.1.21 - Missing Authorization Icegram Engage <= 3.1.21	`CVE-2024-21748`	4.3 Medium	Huynh Tien Si	Yes
2023-12-27 00:00	Icegram <= 3.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Message Icegram Engage <= 3.1.19	`CVE-2023-51532`	6.4 Medium	Huynh Tien Si	Yes
2023-12-27 00:00	Brave Popup Builder <= 0.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting Brave <= 0.6.2	`CVE-2023-51534`	4.4 Medium	Huynh Tien Si	Yes

Showing 1–10 of 19 reports