nthng

nthng is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #714 of 3,398 contributors. The disclosure was published in 2026.

Their research concentrates on SQL Injection, which accounts for 2 of their findings (40%). Other recurring categories include Cross-Site Scripting, Path Traversal. The average CVSS score across these disclosures is 7.3, peaking at 8.8. Severity breakdown: 0 critical and 4 high.

The most affected software includes Bulk Order Update for WooCommerce (1), Object Sync for Salesforce (1), VikAppointments Services Booking… (1), across 5 distinct plugins, themes and core versions in total.

2 of the 5 disclosed issues have a vendor fix, while 3 remain unpatched. The most severe finding, "WHMCS Bridge <= 6.9 - Unauthenticated Arbitrary File Upload via 'ccce' Parameter", scores 8.8 out of 10.