TANG Cheuk Hei (siunam)

TANG Cheuk Hei (siunam) is a security researcher credited with 27 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #198 of 3,515 contributors. Their disclosures were published between 2024 and 2026. The most productive year was 2024, with 22 findings.

Their research concentrates on Unrestricted Upload Of File With Dangerous Type, which accounts for 11 of their findings (41%). Other recurring categories include Path Traversal, Code Injection. The average CVSS score across these disclosures is 7.4, peaking at 9.8. Severity breakdown: 2 critical and 18 high.

The most affected software includes Bit Form (6), Advanced File Manager (4), File Manager (4), across 10 distinct plugins, themes and core versions in total.

All 27 disclosed issues have since received a vendor fix. The most severe finding, "Temporary Login <= 1.0.0 - Authentication Bypass to Account Takeover", scores 9.8 out of 10.

202420252026

Critical

High

Medium

Low

Global Rank

#198

of 3,515 researchers

Vulns

Critical2

High18

Medium7

Low0

Affected Assets

11plugins

Avg CVSS

7.4

Average score of vulnerabilities

Researcher Submissions

27 records


2026-04-30 20:59	Temporary Login <= 1.0.0 - Authentication Bypass to Account Takeover Temporary Login <= 1.0.0	`CVE-2026-7567`	9.8 Critical	TANG Cheuk Hei (siunam)	Yes
2025-06-13 17:25	File Manager Pro – Filester <= 1.8.8 - Authenticated (Administrator+) Arbitrary File Upload File Manager Pro <= 1.8.8	`CVE-2025-3234`	7.2 High	TANG Cheuk Hei (siunam)	Yes
2025-06-02 20:00	Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploads File Manager <= 6.7	`CVE-2025-1725`	6.4 Medium	TANG Cheuk Hei (siunam)	Yes
2025-05-14 00:00	File Manager Advanced Shortcode <= Multiple Versions - Authenticated (Administrator+) Local JavaScript File Inclusion via Shortcode File Manager Advanced Shortcode <= 2.5.4	`CVE-2024-13914`	7.2 High	TANG Cheuk Hei (siunam)	Yes
2025-01-16 00:00	Advanced File Manager 5.2.12 - 5.2.13 - Authenticated (Subscriber+) Arbitrary File Upload Advanced File Manager 5.2.12 – 5.2.13	`CVE-2024-13333`	7.5 High	TANG Cheuk Hei (siunam)	Yes
2024-12-23 00:00	Tracking Code Manager <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Tracking Code Manager <= 2.3.0	`CVE-2024-8721`	6.4 Medium	TANG Cheuk Hei (siunam)	Yes
2024-12-06 21:06	FileOrganizer <= 1.1.4 - Authenticated (Administrator+) Local JavaScript File Inclusion FileOrganizer <= 1.1.4	`CVE-2024-11010`	7.2 High	TANG Cheuk Hei (siunam)	Yes
2024-11-27 00:00	File Manager Pro – Filester <= 1.8.5 - Authenticated (Administrator+) Local JavaScript File Inclusion File Manager Pro <= 1.8.5	`CVE-2024-9669`	7.2 High	TANG Cheuk Hei (siunam)	Yes
2024-11-27 00:00	File Manager Pro – Filester <= 1.8.6- Authenticated (Subscriber+) Arbitrary File Upload File Manager Pro <= 1.8.6	`CVE-2024-8066`	7.5 High	TANG Cheuk Hei (siunam)	Yes
2024-10-29 02:34	FileOrganizer <= 1.0.9 - Authenticated (Subscriber+) Arbitrary File Upload FileOrganizer <= 1.0.9	`CVE-2024-7985`	7.5 High	TANG Cheuk Hei (siunam)	Yes

Showing 1–10 of 27 reports