Kien Hoang

Kien Hoang is a security researcher credited with 6 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #676 of 3,515 contributors. The disclosure was published in 2021.

Their research concentrates on Improper Access Control, which accounts for 3 of their findings (50%). Other recurring categories include Incorrect Authorization. The average CVSS score across these disclosures is 6.1, peaking at 8.8. Severity breakdown: 0 critical and 1 high.

The most affected software includes BuddyPress (6), across 1 distinct plugins, themes and core versions in total.

All 6 disclosed issues have since received a vendor fix. The most severe finding, "BuddyPress <= 7.2.1 - Insufficient Privilege De-escalation", scores 8.8 out of 10.

2021

Critical

High

Medium

Low

Global Rank

#676

of 3,515 researchers

Vulns

Critical0

High1

Medium5

Low0

Affected Assets

1plugin

Avg CVSS

6.1

Average score of vulnerabilities

Researcher Submissions

6 records


2021-04-14 00:00	BuddyPress <= 7.2.1 - Missing Authorization to Group Creation BuddyPress <= 7.2.1	`N/A`	5.4 Medium	Kien Hoang	Yes
2021-04-14 00:00	BuddyPress <= 7.2.1 - Insufficient Privilege De-escalation BuddyPress <= 7.2.1	`N/A`	8.8 High	Kien Hoang	Yes
2021-04-14 00:00	BuddyPress <= 7.2.1 - Missing Authorization to Private Post Activity BuddyPress <= 7.2.1	`N/A`	5.4 Medium	Kien Hoang	Yes
2021-04-14 00:00	BuddyPress <= 7.2.1 - Missing Authorization to Unauthorized Group Access BuddyPress <= 7.2.1	`N/A`	5.4 Medium	Kien Hoang	Yes
2021-03-17 00:00	BuddyPress <= 7.2.0 - Authorization Bypass to Friend Invite BuddyPress <= 7.2.0	`N/A`	5.4 Medium	Kien Hoang	Yes
2021-03-07 00:00	BuddyPress <= 7.2.0 - Authorization Bypass to Private Message Disclosure BuddyPress <= 7.2.0	`N/A`	6.5 Medium	Kien Hoang	Yes

Showing 1–6 of 6 reports