Nguyen Anh Tien

Nguyen Anh Tien is a security researcher credited with 42 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #162 of 3,908 contributors. Their disclosures were published between 2020 and 2023. The most productive year was 2023, with 20 findings.

Their research concentrates on Missing Authorization, which accounts for 16 of their findings (38%). Other recurring categories include Improper Neutralization Of Input During Web Page Generation, Improper Neutralization Of Special Elements Used In An SQL Command. The average CVSS score across these disclosures is 6.5, peaking at 9.8. Severity breakdown: 4 critical and 9 high.

The most affected software includes Easy Digital Downloads (2), Email Marketing Plugin (2), ActiveCampaign (1), across 40 distinct plugins, themes and core versions in total.

38 of the 42 disclosed issues have a vendor fix, while 4 remain unpatched. The most severe finding, "HUSKY – Products Filter for WooCommerce (formerly WOOF) <= 1.3.4.2 - Unauthenticated SQL Injection via search terms", scores 9.8 out of 10.

2020202120222023

Critical

High

Medium

Low

Global Rank

#162

of 3,908 researchers

Vulns

Critical4

High9

Medium29

Low0

Affected Assets

40plugins

Avg CVSS

6.5

Average score of vulnerabilities

Researcher Submissions

42 records


2023-12-29 00:00	Auto Amazon Links <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Auto Amazon Links <= 5.1.1	`CVE-2023-52175`	6.4 Medium	Nguyen Anh Tien	Yes
2023-12-26 00:00	Easy Digital Downloads <= 3.1.5 - Missing Authorization Easy Digital Downloads <= 3.1.5	`CVE-2023-40005`	5.3 Medium	Nguyen Anh Tien	Yes
2023-11-27 00:00	HUSKY – Products Filter for WooCommerce (formerly WOOF) <= 1.3.4.2 - Unauthenticated SQL Injection via search terms HUSKY <= 1.3.4.2	`CVE-2023-40010`	9.8 Critical	Nguyen Anh Tien	Yes
2023-11-07 00:00	Easy Social Icons <= 3.2.4 - Missing Authorization via cnss_save_ajax_order Easy Social Icons <= 3.2.4	`CVE-2023-33998`	4.3 Medium	Nguyen Anh Tien	Yes
2023-10-18 00:00	BetterLinks <= 1.6.0 - Improper Authorization to Data Import and Export BetterLinks <= 1.6.0	`CVE-2023-45104`	6.5 Medium	Nguyen Anh Tien	Yes
2023-10-11 00:00	IMPress Listings <= 2.6.2 - Missing Authorization IMPress Listings <= 2.6.2	`CVE-2023-45633`	6.5 Medium	Nguyen Anh Tien	No
2023-10-03 00:00	Redirection for Contact Form 7 <= 2.9.2 - Missing Authorization Redirection for Contact Form 7 <= 2.9.2	`CVE-2023-39920`	5.3 Medium	Nguyen Anh Tien	Yes
2023-09-12 00:00	WPvivid Backup Plugin <= 0.9.90 - Missing Authorization via 'start_staging' and 'get_staging_progress' WPvivid < 0.9.91	`CVE-2023-41243`	8.3 High	Nguyen Anh Tien	Yes
2023-09-05 00:00	Carousel Slider <= 2.2.2 - Missing Authorization Carousel Slider <= 2.2.2	`CVE-2023-41848`	4.3 Medium	Nguyen Anh Tien	Yes
2023-07-04 00:00	Simple Giveaways <= 2.46.0 - Missing Authorization via AJAX actions Simple Giveaways <= 2.46.0	`CVE-2023-23893`	6.5 Medium	Nguyen Anh Tien	Yes

Showing 1–10 of 42 reports