Nguy Minh Tuan

Nguy Minh Tuan is a security researcher credited with 10 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #441 of 3,515 contributors. Their disclosures were published between 2021 and 2022. The most productive year was 2022, with 9 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 3 of their findings (30%). Other recurring categories include Race Condition, Cross-Site Scripting. The average CVSS score across these disclosures is 6.7, peaking at 8.8. Severity breakdown: 0 critical and 4 high.

The most affected software includes Rate My Post (2), Admin Management Xtended (1), Agile Store Locator (1), across 9 distinct plugins, themes and core versions in total.

All 10 disclosed issues have since received a vendor fix. The most severe finding, "Store Locator WordPress <= 1.4.5 - Cross-Site Request Forgery to Cross-Site Scripting", scores 8.8 out of 10.

20212022

Critical

High

Medium

Low

Global Rank

#441

of 3,515 researchers

Vulns

Critical0

High4

Medium6

Low0

Affected Assets

9plugins

Avg CVSS

6.7

Average score of vulnerabilities

Researcher Submissions

10 records


2022-10-05 00:00	WP-Polls <= 2.76.0 - Race Condition WP-Polls <= 2.76.0	`CVE-2022-40130`	4.3 Medium	Nguy Minh Tuan	Yes
2022-09-28 00:00	Store Locator WordPress <= 1.4.5 - Cross-Site Request Forgery to Cross-Site Scripting Agile Store Locator <= 1.4.5	`CVE-2022-41615`	8.8 High	Nguy Minh Tuan	Yes
2022-09-14 00:00	Rate my Post – WP Rating System <= 3.3.4 - Cross-Site Request Forgery Rate My Post <= 3.3.4	`CVE-2022-40671`	8.8 High	Nguy Minh Tuan	Yes
2022-09-01 00:00	Rate my Post – WP Rating System <= 3.3.4 - Race Condition Rate My Post <= 3.3.4	`CVE-2022-40310`	4.3 Medium	Nguy Minh Tuan	Yes
2022-08-31 00:00	WP-PostRatings <= 1.89 - Race Condition WP-PostRatings <= 1.89	`CVE-2022-36422`	4.3 Medium	Nguy Minh Tuan	Yes
2022-08-25 00:00	Event Calendar <= 1.4.6 - Missing Authorization to Event Modification Event Calendar <= 1.4.6	`CVE-2022-38067`	6.5 Medium	Nguy Minh Tuan	Yes
2022-08-09 00:00	Contest Gallery <= 17.0.4 - Authenticated (Author+) SQL Injection Contest Gallery <= 17.0.4	`CVE-2022-36394`	8.8 High	Nguy Minh Tuan	Yes
2022-05-27 12:53	Admin Management Xtended <= 2.4.4 - Cross-Site Request Forgery Admin Management Xtended <= 2.4.4	`CVE-2022-29450`	8.8 High	Nguy Minh Tuan	Yes
2022-05-04 06:31	Image Hover Effects Ultimate <= 9.7.1 - Reflected Cross-Site Scripting Image Hover Effects Ultimate ( Image… <= 9.7.1	`CVE-2022-29424`	6.1 Medium	Nguy Minh Tuan	Yes
2021-10-29 00:00	Download Monitor <= 4.4.6 - Reflected Cross-Site Scripting Download Monitor <= 4.4.6	`CVE-2021-36920`	6.1 Medium	Nguy Minh Tuan	Yes

Showing 1–10 of 10 reports