thiennv
thiennv is a security researcher credited with 196 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #44 of 3,899 contributors. Their disclosures were published between 2022 and 2025. The most productive year was 2023, with 103 findings.
Their research concentrates on Improper Neutralization Of Input During Web Page Generation, which accounts for 97 of their findings (49%). Other recurring categories include Cross-Site Request Forgery, Missing Authorization. The average CVSS score across these disclosures is 5.6, peaking at 8.8. Severity breakdown: 0 critical and 19 high.
The most affected software includes Donations Made Easy (4), Awesome Support (3), Contest Gallery (3), across 164 distinct plugins, themes and core versions in total.
108 of the 196 disclosed issues have a vendor fix, while 88 remain unpatched. The most severe finding, "WP User Switch <= 1.1.0 - Authenticated (Subscriber+) Privilege Escalation", scores 8.8 out of 10.
#44
of 3,899 researchers
196
164
5.6
Average score of vulnerabilities
Researcher Submissions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C