An Đặng

An Đặng is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #864 of 3,515 contributors. Their disclosures were published between 2023 and 2024. The most productive year was 2023, with 3 findings.

Their research concentrates on Authentication Bypass Using An Alternate Path Or Channel, which accounts for 1 of their findings (25%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization. The average CVSS score across these disclosures is 7.0, peaking at 9.8. Severity breakdown: 2 critical and 0 high.

The most affected software includes MStore API (2), ShortCodes UI (1), Smush (1), across 3 distinct plugins, themes and core versions in total.

3 of the 4 disclosed issues have a vendor fix, while 1 remain unpatched. The most severe finding, "MStore API <= 4.0.1 - Unauthenticated SQL Injection", scores 9.8 out of 10.

20232024

Critical

High

Medium

Low

Global Rank

#864

of 3,515 researchers

Vulns

Critical2

High0

Medium2

Low0

Affected Assets

3plugins

Avg CVSS

7.1

Average score of vulnerabilities

Researcher Submissions

4 records


2024-06-20 00:00	Smush – Lazy Load Images, Optimize & Compress Images <= 3.16.4 - Missing Authorization to Resmush List Deletion Smush <= 3.16.4	`CVE-2023-3352`	4.3 Medium	Truoc Phan	Yes
2023-10-03 00:00	ShortCodes UI <= 1.9.8 - Cross-Site Request Forgery ShortCodes UI <= 1.9.8	`CVE-2023-44994`	4.3 Medium	An Đặng	No
2023-06-23 00:00	MStore API <= 4.0.1 - Unauthenticated SQL Injection MStore API <= 4.0.1	`CVE-2023-3197`	9.8 Critical	Truoc Phan	Yes
2023-06-19 00:00	MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation MStore API <= 4.10.7	`CVE-2023-3277`	9.8 Critical	Truoc Phan	Yes

Showing 1–4 of 4 reports