Phuoc Pham (p3tl0v3r)

Phuoc Pham (p3tl0v3r) is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #895 of 3,515 contributors. The disclosure was published in 2024.

Their research concentrates on Cross-Site Scripting, which accounts for 4 of their findings (100%). The average CVSS score across these disclosures is 6.4, peaking at 6.4.

The most affected software includes Carousel, Slider, Photo Gallery… (1), ShopLentor (1), Sydney Toolbox (1), across 4 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix.

2024

Critical

High

Medium

Low

Global Rank

#895

of 3,515 researchers

Vulns

Critical0

High0

Medium4

Low0

Affected Assets

4plugins

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

4 records


2024-05-06 00:00	The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate The Plus Addons for Elementor <= 5.4.2	`CVE-2024-2785`	6.4 Medium	Phuoc Pham (p3tl0v3r)	Yes
2024-04-05 00:00	Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sp_wp_carousel_shortcode' Carousel, Slider, Photo Gallery… <= 2.6.3	`CVE-2024-2949`	6.4 Medium	Ngô Thiên An (ancorn_)	Yes
2024-04-04 00:00	ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.4 - Authenticated (Contributor+) Stored Cross-site Scripting via QR Code Widget ShopLentor <= 2.8.4	`CVE-2024-2946`	6.4 Medium	Ngô Thiên An (ancorn_)	Yes
2024-03-28 00:00	Sydney Toolbox <= 1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Sydney Toolbox <= 1.26	`CVE-2024-2936`	6.4 Medium	Ngô Thiên An (ancorn_)	Yes

Showing 1–4 of 4 reports