Tieu Pham Trong Nhan

Tieu Pham Trong Nhan is a security researcher credited with 45 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #135 of 3,515 contributors. Their disclosures were published between 2024 and 2025. The most productive year was 2024, with 29 findings.

Their research concentrates on Missing Authorization, which accounts for 36 of their findings (80%). Other recurring categories include Cross-Site Scripting, Authentication Bypass Using An Alternate Path Or Channel. The average CVSS score across these disclosures is 4.9, peaking at 9.8. Severity breakdown: 1 critical and 2 high.

The most affected software includes Kognetiks Chatbot for WordPress (4), BuddyPress WooCommerce My Account… (2), Community by PeepSo (2), across 36 distinct plugins, themes and core versions in total.

42 of the 45 disclosed issues have a vendor fix, while 3 remain unpatched. The most severe finding, "Themes Coder – Create Android & iOS Apps For Your Woocommerce Site <= 1.3.4 - Insecure Direct Object Reference to Password Change/Account Takeover/Privilege Escalation", scores 9.8 out of 10.

20242025
Critical
High
Medium
Low
Global Rank

#135

of 3,515 researchers

Vulns

45

Critical1
High2
Medium42
Low0
Affected Assets

36

36plugins
Avg CVSS

4.9

Average score of vulnerabilities

Researcher Submissions

45 records
2025-02-28 00:00CVE-2025-1780
4.3
Medium
Tieu Pham Trong NhanYes
2025-02-28 00:00CVE-2024-13358
4.3
Medium
Tieu Pham Trong NhanYes
2025-02-19 21:09CVE-2024-13520
5.3
Medium
Tieu Pham Trong NhanYes
2025-02-18 19:34CVE-2024-13364
5.3
Medium
Tieu Pham Trong NhanYes
2025-01-31 00:00CVE-2024-13651
4.3
Medium
Tieu Pham Trong NhanYes
2025-01-30 00:29CVE-2024-12269
7.5
High
Tieu Pham Trong NhanYes
2025-01-23 00:00CVE-2024-13335
4.3
Medium
Tieu Pham Trong NhanYes
2025-01-20 00:00CVE-2024-12104
5.3
Medium
Tieu Pham Trong NhanYes
2025-01-14 00:00CVE-2024-10326
4.3
Medium
Tieu Pham Trong NhanYes
2025-01-08 22:07CVE-2024-11929
6.4
Medium
Tieu Pham Trong NhanNo
Showing 1–10 of 45 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C