nthng

nthng is a security researcher credited with 9 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #515 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Scripting, which accounts for 4 of their findings (44%). Other recurring categories include SQL Injection, Path Traversal. The average CVSS score across these disclosures is 7.2, peaking at 8.8. Severity breakdown: 0 critical and 7 high.

The most affected software includes Bulk Order Update for WooCommerce (1), Getwid (1), Object Sync for Salesforce (1), across 9 distinct plugins, themes and core versions in total.

4 of the 9 disclosed issues have a vendor fix, while 5 remain unpatched. The most severe finding, "WHMCS Bridge <= 6.9 - Unauthenticated Arbitrary File Upload via 'ccce' Parameter", scores 8.8 out of 10.

2026
Critical
High
Medium
Low
Global Rank

#515

of 3,823 researchers

Vulns

9

Critical0
High7
Medium2
Low0
Affected Assets

9

9plugins
Avg CVSS

7.2

Average score of vulnerabilities

Researcher Submissions

9 records
2026-10-13 15:34CVE-2026-94377
7.2
High
nthngNo
2026-10-09 17:05CVE-2026-91862
6.4
Medium
nthngYes
2026-09-24 18:55CVE-2026-94573
7.2
High
nthngYes
2026-09-22 19:45CVE-2026-93368
7.5
High
nthngNo
2026-08-14 14:02CVE-2026-15162
7.5
High
nthngNo
2026-08-04 16:07CVE-2026-16143
7.2
High
nthngYes
2026-08-04 16:06CVE-2026-15918
7.5
High
nthngYes
2026-07-07 16:36CVE-2026-14489
8.8
High
nthngNo
2026-07-07 16:31CVE-2026-14500
5.3
Medium
nthngNo
Showing 1–9 of 9 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C