← All credits
Tieu Pham Trong Nhan
45 vulnerability records and advisories credit this contributor.
CVE-2024-9531
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.4 - Missing Authorization to Forged Vendor Profile Deletion Email Sending
CVE-2024-12027
Message Filter for Contact Form 7 <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) Filter Updates/Deletions
CVE-2024-11929
Responsive FlipBook Plugin Wordpress <= 2.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
CVE-2024-12269
Safe Ai Malware Protection for WP <= 1.0.17 - Missing Authorization to Unauthenticated Database Export
CVE-2024-13335
Sastra Essential Addons for Elementor – Free Elementor Addons, Widgets and Templates <= 1.0.14 - Missing Authorization to Spexo Theme Install
CVE-2024-10584
DirectoryPress <= 3.6.16 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2024-9705
Ultimate Coming Soon & Maintenance <= 1.0.9 - Missing Authorization to Authenticated (Subscriber+) Template Name Update
CVE-2024-13358
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.24 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update
CVE-2024-6411
ProfileGrid – User Profiles, Groups and Communities <= 5.8.9 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation
CVE-2024-10326
RomethemeKit For Elementor <= 1.5.3 - Missing Authorization in save_options and reset_widgets