Wordfence Intelligence   >   Vulnerability Researchers   >   thiennv

thiennv

27
All Time Ranking
180
All Time Discoveries
0
90 Day Published Submissions
N/A
Last Published Submission

Showing 1-20 of 180 Vulnerabilities

iNET Webkit <= 1.2.2 - Missing Authorization
5.3
CVE-2025-22629
Feb 11, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Dynamic URL SEO <= 1.0 - Reflected Cross-Site Scripting
6.1
CVE-2025-23984
Feb 3, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Dynamic URL SEO <= 1.0 - Cross-Site Request Forgery
4.3
CVE-2025-23985
Jan 27, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Tax Report for WooCommerce <= 2.2 - Reflected Cross-Site Scripting
6.1
CVE-2025-23731
Jan 16, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
W3SPEEDSTER <= 7.33 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2025-23765
Jan 16, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EELV Newsletter <= 4.8.2 - Reflected Cross-Site Scripting
6.1
CVE-2025-23602
Jan 16, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Group category creator <= 1.3.0.3 - Reflected Cross-Site Scripting
6.1
CVE-2025-23603
Jan 16, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Podčlánková inzerce <= 2.4.0 - Reflected Cross-Site Scripting
6.1
CVE-2025-23697
Jan 16, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Youtube Video Grid | Youmax <= 1.9 - Reflected Cross-Site Scripting
6.1
CVE-2025-23634
Jan 16, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
SC Simple Zazzle <= 1.1.6 - Reflected Cross-Site Scripting
6.1
CVE-2025-23733
Jan 16, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
XTRA Settings <= 2.1.8 - Reflected Cross-Site Scripting
6.1
CVE-2025-23729
Jan 16, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Ui Slider Filter By Price <= 1.1 - Reflected Cross-Site Scripting
6.1
CVE-2025-23555
Jan 16, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Sale with Razorpay <= 1.0 - Reflected Cross-Site Scripting
6.1
CVE-2025-23516
Jan 16, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
azurecurve Floating Featured <= 2.2.0 - Reflected Cross-Site Scripting
6.1
CVE-2025-23482
Jan 16, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Online Marksheet Creator : eMarksheet <= 5.0 - Reflected Cross-Site Scripting
6.1
CVE-2025-23599
Jan 16, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WpTravelly <= 1.8.5 - Missing Authorization
5.3
CVE-2025-22737
Jan 14, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Pretty Url <= 1.5.4 - Cross-Site Request Forgery
4.3
CVE-2025-22563
Jan 7, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Pretty Url <= 1.5.4 - Reflected Cross-Site Scripting
6.1
CVE-2025-22564
Jan 7, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
TubePress.NET <= 4.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
6.1
CVE-2025-22559
Jan 7, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Multiple Carousel <= 2.0 - Unauthenticated SQL Injection
7.5
CVE-2025-22553
Jan 7, 2025
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Title CVE ID CVSS Vector Date
iNET Webkit <= 1.2.2 - Missing Authorization CVE-2025-22629 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N February 11, 2025
Dynamic URL SEO <= 1.0 - Reflected Cross-Site Scripting CVE-2025-23984 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N February 3, 2025
Dynamic URL SEO <= 1.0 - Cross-Site Request Forgery CVE-2025-23985 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 27, 2025
Tax Report for WooCommerce <= 2.2 - Reflected Cross-Site Scripting CVE-2025-23731 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 16, 2025
W3SPEEDSTER <= 7.33 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2025-23765 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 16, 2025
EELV Newsletter <= 4.8.2 - Reflected Cross-Site Scripting CVE-2025-23602 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 16, 2025
Group category creator <= 1.3.0.3 - Reflected Cross-Site Scripting CVE-2025-23603 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 16, 2025
Podčlánková inzerce <= 2.4.0 - Reflected Cross-Site Scripting CVE-2025-23697 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 16, 2025
Youtube Video Grid | Youmax <= 1.9 - Reflected Cross-Site Scripting CVE-2025-23634 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 16, 2025
SC Simple Zazzle <= 1.1.6 - Reflected Cross-Site Scripting CVE-2025-23733 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 16, 2025
XTRA Settings <= 2.1.8 - Reflected Cross-Site Scripting CVE-2025-23729 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 16, 2025
Ui Slider Filter By Price <= 1.1 - Reflected Cross-Site Scripting CVE-2025-23555 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 16, 2025
Sale with Razorpay <= 1.0 - Reflected Cross-Site Scripting CVE-2025-23516 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 16, 2025
azurecurve Floating Featured <= 2.2.0 - Reflected Cross-Site Scripting CVE-2025-23482 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 16, 2025
Online Marksheet Creator : eMarksheet <= 5.0 - Reflected Cross-Site Scripting CVE-2025-23599 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 16, 2025
WpTravelly <= 1.8.5 - Missing Authorization CVE-2025-22737 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N January 14, 2025
Pretty Url <= 1.5.4 - Cross-Site Request Forgery CVE-2025-22563 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N January 7, 2025
Pretty Url <= 1.5.4 - Reflected Cross-Site Scripting CVE-2025-22564 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 7, 2025
TubePress.NET <= 4.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2025-22559 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N January 7, 2025
Multiple Carousel <= 2.0 - Unauthenticated SQL Injection CVE-2025-22553 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N January 7, 2025

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation

This site uses cookies in accordance with our Privacy Policy.