Thanh Hang

Thanh Hang is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,085 of 3,878 contributors. Their disclosures were published between 2024 and 2026. The most productive year was 2024, with 2 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (50%). Other recurring categories include Missing Authorization, Storage Of File With Sensitive Data Under Web Root. The average CVSS score across these disclosures is 4.6, peaking at 5.3.

The most affected software includes Appointment Booking Calendar Plugin… (1), Favorites (1), Seriously Simple Podcasting (1), across 4 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix.

202420252026

Critical

High

Medium

Low

Global Rank

#1085

of 3,878 researchers

Vulns

Critical0

High0

Medium4

Low0

Affected Assets

4plugins

Avg CVSS

4.6

Average score of vulnerabilities

Researcher Submissions

4 records


2026-10-10 00:00	Comment Cleaner 6.1 - 7.1 - Missing Authorization WP Comment Cleaner 6.1 – 7.1	`CVE-2026-107791`	4.3 Medium	Thanh Hang	Yes
2025-03-04 00:00	Favorites <= 2.3.4 - Authenticated (Admin+) Stored Cross-Site Scripting Favorites <= 2.3.4	`CVE-2025-1452`	4.4 Medium	Thanh Hang	Yes
2024-12-23 00:00	BookingPress <= 1.1.22 - Unauthenticated File Export Download Appointment Booking Calendar Plugin… <= 1.1.22	`CVE-2024-12274`	5.3 Medium	Thanh Hang	Yes
2024-06-22 00:00	Seriously Simple Podcasting <= 3.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting Seriously Simple Podcasting <= 3.2.0	`CVE-2024-3751`	4.4 Medium	Thanh Hang	Yes

Showing 1–4 of 4 reports