Ngo Van Thien

Ngo Van Thien is a security researcher credited with 67 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #97 of 3,515 contributors. Their disclosures were published between 2020 and 2023. The most productive year was 2022, with 58 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 53 of their findings (79%). Other recurring categories include Cross-Site Request Forgery (CSRF), Authorization Bypass Through User-Controlled Key. The average CVSS score across these disclosures is 6.2, peaking at 8.8. Severity breakdown: 0 critical and 11 high.

The most affected software includes Booking Ultra Pro Appointments Booking… (3), Quiz and Survey Master (QSM) (3), Yoo Slider (3), across 58 distinct plugins, themes and core versions in total.

43 of the 67 disclosed issues have a vendor fix, while 24 remain unpatched. The most severe finding, "Booking Ultra Pro <= 1.1.6 - Cross-Site Request Forgery", scores 8.8 out of 10.

2020202120222023

Critical

High

Medium

Low

Global Rank

#97

of 3,515 researchers

Vulns

Critical0

High11

Medium56

Low0

Affected Assets

58plugins

Avg CVSS

6.2

Average score of vulnerabilities

Researcher Submissions

67 records


2023-02-14 00:00	Locatoraid Store Locator <= 3.9.11 - Cross Site Request Forgery in grab Locatoraid Store Locator <= 3.9.11	`CVE-2023-25709`	4.3 Medium	Ngo Van Thien	Yes
2023-02-14 00:00	WPGlobus Translate Options <= 2.1.0 - Reflected Cross-Site Scripting via page WPGlobus Translate Options <= 2.1.0	`CVE-2023-25711`	6.1 Medium	Ngo Van Thien	Yes
2022-11-17 00:00	iFeature Slider <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting iFeature Slider <= 1.2	`CVE-2022-45375`	5.5 Medium	Ngo Van Thien	No
2022-10-28 00:00	Slideshow SE <= 2.5.5 - Authenticated (Author+) Stored Cross-Site Scripting Slideshow SE <= 2.5.5	`CVE-2022-41554`	6.4 Medium	Ngo Van Thien	Yes
2022-10-28 00:00	Slideshow SE <= 2.5.5 - Authenticated (Subscriber+) Cross-Site Scripting Slideshow SE <= 2.5.5	`CVE-2022-43461`	6.4 Medium	Ngo Van Thien	Yes
2022-10-27 00:00	Testimonials <= 2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting Super Testimonial <= 2.6	`CVE-2021-36858`	5.5 Medium	Ngo Van Thien	Yes
2022-10-27 00:00	BuddyForms <= 2.7.2 - Authenticated (Contributor+) Stored Stored Cross-Site Scripting Post Form <= 2.7.2	`CVE-2022-38971`	6.4 Medium	Ngo Van Thien	Yes
2022-10-27 00:00	Gallery with thumbnail slider <= 6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Gallery with thumbnail slider <= 6.0	`CVE-2022-42485`	6.4 Medium	Ngo Van Thien	Yes
2022-10-21 00:00	WP Page Builder <= 1.2.6 - Authenticated (Author+) Stored Cross-Site Scripting WP Page Builder <= 1.2.6	`CVE-2022-40963`	6.4 Medium	Ngo Van Thien	Yes
2022-10-21 00:00	Quiz And Survey Master <= 7.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Quiz and Survey Master (QSM) <= 7.3.4	`CVE-2021-36863`	6.4 Medium	Ngo Van Thien	Yes

Showing 1–10 of 67 reports