Ngô Thiên An (ancorn_)

Ngô Thiên An (ancorn_) is a security researcher credited with 246 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #36 of 3,515 contributors. Their disclosures were published between 2023 and 2025. The most productive year was 2024, with 189 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 210 of their findings (85%). Other recurring categories include Improper Input Validation, SQL Injection. The average CVSS score across these disclosures is 6.5, peaking at 9.8. Severity breakdown: 3 critical and 12 high.

The most affected software includes Essential Addons for Elementor (7), Blocksy (5), The Plus Addons for Elementor (5), across 189 distinct plugins, themes and core versions in total.

204 of the 246 disclosed issues have a vendor fix, while 42 remain unpatched. The most severe finding, "Simple Registration for WooCommerce <= 1.5.6 - Unauthenticated Privilege Escalation", scores 9.8 out of 10.

202320242025

Critical

High

Medium

Low

Global Rank

#36

of 3,515 researchers

Vulns

246

Critical3

High12

Medium231

Low0

Affected Assets

189

187plugins2themes

Avg CVSS

6.5

Average score of vulnerabilities

Researcher Submissions

246 records


2025-04-04 00:00	Ecwid Shopping Cart <= 7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Ecwid by Lightspeed Ecommerce Shopping… <= 7.0	`CVE-2025-32195`	6.4 Medium	Ngô Thiên An (ancorn_)	Yes
2025-04-04 00:00	EventON <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion EventON <= 2.4.1	`CVE-2025-32160`	8.8 High	Ngô Thiên An (ancorn_)	Yes
2024-12-02 00:00	All Bootstrap Blocks <= 1.3.19 - Authenticated (Contributor+) Local File Inclusion All Bootstrap Blocks <= 1.3.19	`CVE-2024-53824`	8.8 High	Ngô Thiên An (ancorn_)	Yes
2024-09-30 00:00	Blockspare <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting BlockSpare <= 3.2.4	`CVE-2024-47363`	6.4 Medium	Ngô Thiên An (ancorn_)	Yes
2024-08-26 00:00	Collapsing Archives <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Collapsing Archives <= 3.0.5	`CVE-2024-43934`	6.4 Medium	Ngô Thiên An (ancorn_)	Yes
2024-08-26 00:00	Delicious Recipes – WordPress Recipe Plugin <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting WP Delicious <= 1.6.7	`CVE-2024-43935`	6.4 Medium	Ngô Thiên An (ancorn_)	Yes
2024-08-26 00:00	DSGVO All in one for WP <= 4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting DSGVO All in one for WP <= 4.5	`CVE-2024-43964`	6.4 Medium	Ngô Thiên An (ancorn_)	Yes
2024-08-21 12:38	The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget Settings The Plus Addons for Elementor <= 5.6.2	`CVE-2024-5583`	6.4 Medium	Ngô Thiên An (ancorn_)	Yes
2024-08-16 00:00	Custom Layouts – Post + Product grids made easy <= 1.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting Custom Layouts <= 1.4.11	`CVE-2024-43305`	6.4 Medium	Ngô Thiên An (ancorn_)	Yes
2024-08-16 00:00	All Bootstrap Blocks <= 1.3.19 - Authenticated (Contributor+) Stored Cross-Site Scripting All Bootstrap Blocks <= 1.3.19	`CVE-2024-43349`	6.4 Medium	Ngô Thiên An (ancorn_)	Yes

Showing 1–10 of 246 reports