Thái An

Thái An is a security researcher credited with 55 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #109 of 3,515 contributors. Their disclosures were published between 2024 and 2026. The most productive year was 2025, with 52 findings.

Their research concentrates on SQL Injection, which accounts for 18 of their findings (33%). Other recurring categories include Missing Authorization, Deserialization Of Untrusted Data. The average CVSS score across these disclosures is 7.6, peaking at 9.8. Severity breakdown: 12 critical and 22 high.

The most affected software includes WPAMS - Apartment Management System… (5), Hospital Management System for Wordpress (3), School Management System for Wordpress (3), across 45 distinct plugins, themes and core versions in total.

32 of the 55 disclosed issues have a vendor fix, while 23 remain unpatched. The most severe finding, "Jobmonster - Job Board WordPress Theme <= 4.8.1 - Authentication Bypass", scores 9.8 out of 10.

202420252026

Critical

High

Medium

Low

Global Rank

#109

of 3,515 researchers

Vulns

Critical12

High22

Medium21

Low0

Affected Assets

36plugins9themes

Avg CVSS

7.6

Average score of vulnerabilities

Researcher Submissions

55 records


2026-03-03 00:00	FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More <= 1.4.2 - Unauthenticated Arbitrary File Deletion FormGent <= 1.4.2	`CVE-2026-22460`	9.1 Critical	Thái An	No
2025-10-31 18:15	Service Finder Bookings < 6.1 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover Service Finder Bookings < 6.1	`CVE-2025-6574`	8.8 High	Thái An	Yes
2025-10-30 18:40	Jobmonster - Job Board WordPress Theme <= 4.8.1 - Authentication Bypass Noo JobMonster <= 4.8.1	`CVE-2025-5397`	9.8 Critical	Thái An	Yes
2025-10-21 00:00	Academy LMS Pro <= 3.3.7 - Unauthenticated Privilege Escalation via Social Login Addon Academy LMS Pro <= 3.3.7	`CVE-2025-11086`	8.1 High	Thái An	Yes
2025-10-14 00:00	Case Addons < 1.3.0 - Authenticated (Subscriber+) Arbitrary File Upload Case Addons < 1.3.0	`CVE-2025-62047`	8.8 High	Thái An	Yes
2025-10-03 00:00	JobSearch < 3.0.8 - Unauthenticated PHP Object Injection JobSearch WP Job Board < 3.0.8	`CVE-2025-62025`	8.1 High	Thái An	Yes
2025-10-01 00:00	WooCommerce Vehicle Parts Finder <= 3.7 - Unauthenticated PHP Object Injection WooCommerce Vehicle Parts Finder <= 3.7	`CVE-2025-49380`	8.1 High	Thái An	Yes
2025-09-23 00:00	MultiLoca - WooCommerce Multi Locations Inventory Management <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Options Update via 'wcmlim_settings_ajax_handler' MultiLoca - WooCommerce Multi… <= 4.2.8	`CVE-2025-9054`	9.8 Critical	Thái An	Yes
2025-09-07 00:00	Scape <= 1.5.13 - Unauthenticated PHP Object Injection Scape - Multipurpose WordPress theme <= 1.5.13	`CVE-2025-60213`	8.1 High	Thái An	No
2025-08-25 00:00	Exertio Framework <= 1.3.3 - Authenticated (Subscriber+) SQL Injection Exertio Framework <= 1.3.3	`CVE-2025-49402`	6.5 Medium	Thái An	No

Showing 1–10 of 55 reports