minhtuanact

minhtuanact is a security researcher credited with 74 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #88 of 3,515 contributors. Their disclosures were published between 2019 and 2025. The most productive year was 2023, with 59 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 33 of their findings (45%). Other recurring categories include SQL Injection, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 6.6, peaking at 9.8. Severity breakdown: 6 critical and 19 high.

The most affected software includes Order Your Posts Manually (3), Accessibility Suite by Ability, Inc (2), Advanced Booking Calendar (2), across 67 distinct plugins, themes and core versions in total.

50 of the 74 disclosed issues have a vendor fix, while 24 remain unpatched. The most severe finding, "Contact form 7 Custom validation <= 1.1.3 - Unauthenticated SQL Injection via 'post'", scores 9.8 out of 10.

2019202020212022202320242025
Critical
High
Medium
Low
Global Rank

#88

of 3,515 researchers

Vulns

74

Critical6
High19
Medium48
Low1
Affected Assets

67

67plugins
Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

74 records
2025-04-04 00:00CVE-2025-32138
6.3
Medium
minhtuanactYes
2025-04-03 00:00CVE-2025-31825
6.5
Medium
minhtuanactYes
2025-04-03 00:00CVE-2025-31827
6.5
Medium
minhtuanactYes
2025-01-14 00:00CVE-2025-22735
6.1
Medium
minhtuanactYes
2025-01-06 15:39CVE-2024-12170
5.4
Medium
minhtuanactYes
2025-01-03 00:00CVE-2025-22347
4.3
Medium
minhtuanactYes
2024-12-11 00:00CVE-2024-54312
6.1
Medium
minhtuanactYes
2023-11-23 00:00CVE-2023-48325
4.3
Medium
minhtuanactYes
2023-11-09 00:00CVE-2023-47693
5.3
Medium
minhtuanactYes
2023-11-07 00:00CVE-2023-47548
4.7
Medium
minhtuanactYes
Showing 1–10 of 74 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C