Tri Doan

Tri Doan is a security researcher credited with 6 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #699 of 3,515 contributors. The disclosure was published in 2025.

Their research concentrates on Cross-Site Scripting, which accounts for 3 of their findings (50%). Other recurring categories include SQL Injection, Unrestricted Upload Of File With Dangerous Type. The average CVSS score across these disclosures is 5.0, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes Appointify (1), Behance Portfolio Manager (1), Dima Take Action (1), across 6 distinct plugins, themes and core versions in total.

1 of the 6 disclosed issues have a vendor fix, while 5 remain unpatched.

2025

Critical

High

Medium

Low

Global Rank

#699

of 3,515 researchers

Vulns

Critical0

High1

Medium5

Low0

Affected Assets

6plugins

Avg CVSS

5.0

Average score of vulnerabilities

Researcher Submissions

6 records


2025-04-04 00:00	Behance Portfolio Manager <= 1.7.5 - Authenticated (Administrator+) SQL Injection Behance Portfolio Manager <= 1.7.5	`CVE-2025-32124`	4.9 Medium	Tri Doan	Yes
2025-04-01 00:00	Dima Take Action <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting Dima Take Action <= 1.0.5	`CVE-2025-31742`	4.4 Medium	Tri Doan	No
2025-03-31 00:00	Appointify <= 1.0.8 - Authenticated (Admin+) Arbitrary File Upload Appointify <= 1.0.8	`CVE-2025-31577`	7.2 High	Tri Doan	No
2025-02-03 00:00	Link to URL / Post <= 1.3 - Authenticated (Administrator+) SQL Injection Link to URL / Post <= 1.3	`CVE-2025-25116`	4.9 Medium	Tri Doan	No
2025-02-02 00:00	Social Links <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting Social Links <= 1.2	`CVE-2025-25112`	4.4 Medium	Tri Doan	No
2025-02-02 00:00	Like dislike plus counter \| Like Dislike Buttons <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting Like dislike plus counter <= 1.0	`CVE-2025-25115`	4.4 Medium	Tri Doan	No

Showing 1–6 of 6 reports