Have you found a vulnerability in a WordPress plugin or theme? Report vulnerabilities in WordPress plugins and themes through our bug bounty program and earn a bounty on all in-scope submissions, while we handle the responsible disclosure process on your behalf.

Wordfence Intelligence > Vulnerability Researchers > Nguyen Xuan Chien

Nguyen Xuan Chien

All Time Ranking

161

All Time Discoveries

90 Day Published Submissions

N/A

Last Published Submission

Is this you? Register as a researcher today to add more public profile details here!

Showing 1-20 of 161 Vulnerabilities

Browser Caching with .htaccess 1.2.1 - Cross-Site Request Forgery

4.3

CVE-2025-31439

Mar 28, 2025

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.0.9 - Cross-Site Request Forgery

4.3

CVE-2025-30863

Mar 27, 2025

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Custom Login Logo <= 1.1.7 - Cross-Site Request Forgery

4.3

CVE-2025-30822

Mar 27, 2025

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Custom Fields Account Registration For Woocommerce <= 1.1 - Cross-Site Request Forgery

4.3

CVE-2025-30888

Mar 27, 2025

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Currency Switcher for WooCommerce <= 0.0.7 - Cross-Site Request Forgery

4.3

CVE-2025-30857

Mar 27, 2025

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Anthologize <= 0.8.2 - Cross-Site Request Forgery

4.3

CVE-2025-30823

Mar 27, 2025

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Exchange Rates <= 1.2.2 - Missing Authorization

4.3

CVE-2025-30864

Mar 27, 2025

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Fix Rss Feeds <= 3.1 - Cross-Site Request Forgery

4.3

CVE-2025-30556

Mar 24, 2025

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

banner-manager <= 16.04.19 - Cross-Site Request Forgery to Stored Cross-Site Scripting

6.1

CVE-2025-30565

Mar 24, 2025

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Easy 301 Redirects <= 1.33 - Cross-Site Request Forgery

4.3

CVE-2025-30557

Mar 24, 2025

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

jQuery Dropdown Menu <= 3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

6.1

CVE-2025-30560

Mar 24, 2025

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CAS Maestro <= 1.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

6.1

CVE-2025-30561

Mar 24, 2025

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Awesome Logos <= 1.2 - Cross-Site Request Forgery to SQL Injection

4.3

CVE-2025-30528

Mar 24, 2025

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

SpeakPipe <= 0.2 - Cross-Site Request Forgery

4.3

CVE-2025-30619

Mar 24, 2025

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

WP Profitshare <= 1.4.9 - Authenticated (Editor+) SQL Injection

4.9

CVE-2025-30525

Mar 24, 2025

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

WP Colorful Tag Cloud <= 2.0.1 - Reflected Cross-Site Scripting

6.1

CVE-2025-28865

Mar 24, 2025

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

WP Odoo Form Integrator <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

6.1

CVE-2025-30620

Mar 24, 2025

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Translator <= 0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

6.1

CVE-2025-30621

Mar 24, 2025

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Rewrite <= 0.2.1 - Cross-Site Request Forgery

4.3

CVE-2025-30617

Mar 24, 2025

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Recapture for WooCommerce <= 1.0.43 - Cross-Site Request Forgery to Settings Update

4.3

CVE-2025-26899

Mar 3, 2025

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Title	CVE ID	CVSS	Vector	Date
Browser Caching with .htaccess 1.2.1 - Cross-Site Request Forgery	CVE-2025-31439	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 28, 2025
Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.0.9 - Cross-Site Request Forgery	CVE-2025-30863	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 27, 2025
Custom Login Logo <= 1.1.7 - Cross-Site Request Forgery	CVE-2025-30822	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 27, 2025
Custom Fields Account Registration For Woocommerce <= 1.1 - Cross-Site Request Forgery	CVE-2025-30888	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 27, 2025
Currency Switcher for WooCommerce <= 0.0.7 - Cross-Site Request Forgery	CVE-2025-30857	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 27, 2025
Anthologize <= 0.8.2 - Cross-Site Request Forgery	CVE-2025-30823	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 27, 2025
Exchange Rates <= 1.2.2 - Missing Authorization	CVE-2025-30864	4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N	March 27, 2025
Fix Rss Feeds <= 3.1 - Cross-Site Request Forgery	CVE-2025-30556	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 24, 2025
banner-manager <= 16.04.19 - Cross-Site Request Forgery to Stored Cross-Site Scripting	CVE-2025-30565	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	March 24, 2025
Easy 301 Redirects <= 1.33 - Cross-Site Request Forgery	CVE-2025-30557	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 24, 2025
jQuery Dropdown Menu <= 3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting	CVE-2025-30560	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	March 24, 2025
CAS Maestro <= 1.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting	CVE-2025-30561	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	March 24, 2025
Awesome Logos <= 1.2 - Cross-Site Request Forgery to SQL Injection	CVE-2025-30528	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 24, 2025
SpeakPipe <= 0.2 - Cross-Site Request Forgery	CVE-2025-30619	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 24, 2025
WP Profitshare <= 1.4.9 - Authenticated (Editor+) SQL Injection	CVE-2025-30525	4.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N	March 24, 2025
WP Colorful Tag Cloud <= 2.0.1 - Reflected Cross-Site Scripting	CVE-2025-28865	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	March 24, 2025
WP Odoo Form Integrator <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting	CVE-2025-30620	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	March 24, 2025
Translator <= 0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting	CVE-2025-30621	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	March 24, 2025
Rewrite <= 0.2.1 - Cross-Site Request Forgery	CVE-2025-30617	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 24, 2025
Recapture for WooCommerce <= 1.0.43 - Cross-Site Request Forgery to Settings Update	CVE-2025-26899	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 3, 2025

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation

Nguyen Xuan Chien

Showing 1-20 of 161 Vulnerabilities

Share this researcher's vulnerability discoveries

Cookie Options

Strictly Necessary

Performance/Analytical

Targeting