thiennv
thiennv is a security researcher credited with 196 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #43 of 3,515 contributors. Their disclosures were published between 2022 and 2025. The most productive year was 2023, with 103 findings.
Their research concentrates on Cross-Site Scripting, which accounts for 97 of their findings (49%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization. The average CVSS score across these disclosures is 5.6, peaking at 8.8. Severity breakdown: 0 critical and 19 high.
The most affected software includes Donations Made Easy (4), Awesome Support (3), Contest Gallery (3), across 164 distinct plugins, themes and core versions in total.
107 of the 196 disclosed issues have a vendor fix, while 89 remain unpatched. The most severe finding, "WP User Switch <= 1.1.0 - Authenticated (Subscriber+) Privilege Escalation", scores 8.8 out of 10.
#43
of 3,515 researchers
196
164
5.6
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C