vuxvinh

vuxvinh is a security researcher credited with 24 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #255 of 3,984 contributors. The disclosure was published in 2026.

Their research concentrates on Exposure Of Sensitive Information To An Unauthorized Actor, which accounts for 7 of their findings (29%). Other recurring categories include Missing Authorization, Client-Side Enforcement Of Server-Side Security. The average CVSS score across these disclosures is 5.3, peaking at 8.8. Severity breakdown: 0 critical and 1 high.

The most affected software includes FluentBoards (3), Salon Booking System (3), Forminator Forms (2), across 16 distinct plugins, themes and core versions in total.

All 24 disclosed issues have since received a vendor fix. The most severe finding, "OAuth Server <= 6.3.0 - Authenticated (Subscriber+) Arbitrary User Identity Token Issuance to Privilege Escalation", scores 8.8 out of 10.