Thura Moe Myint (mgthuramoemyint)

Thura Moe Myint (mgthuramoemyint) is a security researcher credited with 24 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #223 of 3,515 contributors. Their disclosures were published between 2019 and 2024. The most productive year was 2024, with 10 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 10 of their findings (42%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery (CSRF). The average CVSS score across these disclosures is 5.8, peaking at 10.0. Severity breakdown: 1 critical and 3 high.

The most affected software includes Photo Gallery by 10Web (4), Quiz and Survey Master (QSM) (3), ARforms (2), across 15 distinct plugins, themes and core versions in total.

All 24 disclosed issues have since received a vendor fix. The most severe finding, "ARForms Form Builder <= 6.5 - Unauthenticated Arbitrary File Upload", scores 10.0 out of 10.

201920202021202220232024
Critical
High
Medium
Low
Global Rank

#223

of 3,515 researchers

Vulns

24

Critical1
High3
Medium20
Low0
Affected Assets

17

17plugins
Avg CVSS

5.8

Average score of vulnerabilities

Researcher Submissions

24 records
2024-05-30 00:00CVE-2024-4205
4.3
Medium
Thura Moe Myint (mgthuramoemyint)Yes
2024-05-22 16:40CVE-2024-3626
4.3
Medium
Thura Moe Myint (mgthuramoemyint)Yes
2024-05-22 00:00CVE-2024-0427
6.1
Medium
Thura Moe Myint (mgthuramoemyint)Yes
2024-05-17 00:00CVE-2024-4620
10.0
Critical
Thura Moe Myint (mgthuramoemyint)Yes
2024-04-15 00:00CVE-2024-3869
4.3
Medium
Thura Moe Myint (mgthuramoemyint)Yes
2024-04-15 00:00CVE-2024-3243
4.3
Medium
Thura Moe Myint (mgthuramoemyint)Yes
2024-04-12 00:00CVE-2024-3662
4.3
Medium
Thura Moe Myint (mgthuramoemyint)Yes
2024-04-12 00:00CVE-2024-3233
4.3
Medium
Thura Moe Myint (mgthuramoemyint)Yes
2024-04-04 00:00CVE-2024-3213
5.3
Medium
Thura Moe Myint (mgthuramoemyint)Yes
2024-04-04 00:00CVE-2024-3214
5.8
Medium
Thura Moe Myint (mgthuramoemyint)Yes
Showing 1–10 of 24 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C