Jin Huang

Jin Huang is a security researcher credited with 9 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #473 of 3,515 contributors. The disclosure was published in 2021.

Their research concentrates on Unrestricted Upload Of File With Dangerous Type, which accounts for 7 of their findings (78%). Other recurring categories include Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 8.6, peaking at 9.8. Severity breakdown: 3 critical and 6 high.

The most affected software includes classyfrieds (1), College publisher Import (1), Easy Form Builder (1), across 9 distinct plugins, themes and core versions in total.

None of the 9 disclosed issues have a published fix yet. The most severe finding, "Imagements <= 1.2.5 - Arbitrary File Upload", scores 9.8 out of 10.

2021

Critical

High

Medium

Low

Global Rank

#473

of 3,515 researchers

Vulns

Critical3

High6

Medium0

Low0

Affected Assets

9plugins

Avg CVSS

8.6

Average score of vulnerabilities

Researcher Submissions

9 records


2021-08-17 00:00	Fileviewer <= 2.2 - Cross-Site Request Forgery Fileviewer <= 2.2	`CVE-2021-24491`	8.8 High	Jin Huang	No
2021-08-16 00:00	Email Artillery (MASS EMAIL) <= 4.1 - Arbitrary File Upload Email Artillery (MASS EMAIL) <= 4.1	`CVE-2021-24490`	7.2 High	Jin Huang	No
2021-04-11 00:00	College publisher Import <= 0.1 - Arbitrary File Upload College publisher Import <= 0.1	`CVE-2021-24254`	7.2 High	Jin Huang	No
2021-04-10 00:00	Event Banner <= 1.3 - Cross-Site Request Forgery Event Banner <= 1.3	`CVE-2021-24252`	7.2 High	Jin Huang	No
2021-04-10 00:00	classyfrieds <= 3.8 - Arbitrary File Upload classyfrieds <= 3.8	`CVE-2021-24253`	8.8 High	Jin Huang	No
2021-04-08 00:00	Imagements <= 1.2.5 - Arbitrary File Upload Imagements <= 1.2.5	`CVE-2021-24236`	9.8 Critical	Jin Huang	No
2021-03-26 00:00	N5 Upload Form <= 1.0 - Arbitrary File Upload N5 Upload Form <= 1.0	`CVE-2021-24223`	9.8 Critical	Jin Huang	No
2021-03-26 00:00	Easy Form Builder <= 1.0 - Arbitrary File Upload Easy Form Builder <= 1.0	`CVE-2021-24224`	8.8 High	Jin Huang	No
2021-03-26 00:00	WP-Curriculo Vitae Free <= 6.3 - Arbitrary File Upload WP-Curriculo Vitae Free <= 6.3	`CVE-2021-24222`	9.8 Critical	Jin Huang	No

Showing 1–9 of 9 reports