Truoc Phan

20212022202320242025

Critical

High

Medium

Low

Global Rank

#122

of 3,238 researchers

Vulns

48

Critical10

High7

Medium31

Low0

Affected Assets

21

14plugins7themes

Avg CVSS

6.8

Average score of vulnerabilities

Researcher Submissions

48 records


2025-05-07 00:00	tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'data' tagDiv Composer <= 5.3	`CVE-2025-2806`	6.1 Medium	Truoc Phan	Yes
2025-04-29 19:47	tagDiv Opt-In Builder <= 1.7 - Authenticated (Subscriber+) SQL Injection via subscriptionCouponId Parameter tagDiv Opt-In Builder <= 1.7	`CVE-2025-2890`	6.5 Medium	Truoc Phan	Yes
2025-03-27 19:53	tagDiv Composer <= 5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting tagDiv Composer <= 5.3	`CVE-2025-1705`	6.1 Medium	Truoc Phan	Yes
2025-03-27 16:33	tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'account_id' and 'account_username' tagDiv Composer <= 5.3	`CVE-2025-2804`	6.1 Medium	Truoc Phan	Yes
2024-10-01 00:00	WP Hotel Booking <= 2.1.2 - Authenticated (Subscriber+) Arbitrary File Upload WP Hotel Booking <= 2.1.2	`CVE-2024-7855`	8.8 High	Truoc Phan	Yes
2024-08-30 00:00	tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[] tagDiv Composer <= 5.0	`CVE-2024-3886`	6.1 Medium	Truoc Phan	Yes
2024-08-30 00:00	tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[] tagDiv Composer <= 5.0	`CVE-2024-5212`	6.1 Medium	Truoc Phan	Yes
2024-08-16 00:00	tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection tagDiv Opt-In Builder <= 1.4.4	`CVE-2023-3416`	7.2 High	Truoc Phan	Yes
2024-08-16 00:00	tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection tagDiv Opt-In Builder <= 1.4.4	`CVE-2023-3419`	7.2 High	Truoc Phan	Yes
2024-08-14 14:08	MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.2 - Authentication Bypass to Account Takeover MStore API <= 4.15.2	`CVE-2024-7628`	8.1 High	Truoc Phan	Yes

Showing 1–10 of 48 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C