Doan Dinh Van

Doan Dinh Van is a security researcher credited with 8 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #610 of 3,878 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2026, with 4 findings.

Their research concentrates on Cross-Site Request Forgery (CSRF), which accounts for 3 of their findings (38%). Other recurring categories include Cross-Site Scripting, Incorrect Privilege Assignment. The average CVSS score across these disclosures is 5.9, peaking at 9.8. Severity breakdown: 2 critical and 0 high.

The most affected software includes ACF Frontend Admin by DynamiApps (1), Chartify (1), Contact Form to Chat Apps | Click… (1), across 8 distinct plugins, themes and core versions in total.

All 8 disclosed issues have since received a vendor fix. The most severe finding, "SigmaForms Pro <= 1.4.11 - Unauthenticated Arbitrary File Deletion via Path Traversal in File Upload Field", scores 9.8 out of 10.

20252026
Critical
High
Medium
Low
Global Rank

#610

of 3,878 researchers

Vulns

8

Critical2
High0
Medium6
Low0
Affected Assets

8

8plugins
Avg CVSS

5.9

Average score of vulnerabilities

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C