Duy Tran

Duy Tran is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #812 of 3,574 contributors. The disclosure was published in 2026.

Their research concentrates on Authorization Bypass Through User-Controlled Key, which accounts for 2 of their findings (40%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Cross-Site Scripting. The average CVSS score across these disclosures is 5.3, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes Easy Appointments (1), Everest Forms (1), FiboSearch (1), across 5 distinct plugins, themes and core versions in total.

All 5 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#812

of 3,574 researchers

Vulns

Critical0

High1

Medium4

Low0

Affected Assets

5plugins

Avg CVSS

5.3

Average score of vulnerabilities

Researcher Submissions

5 records


2026-08-25 00:00	FiboSearch – Ajax Search for WooCommerce < 1.34.1 - Unauthenticated Information Exposure FiboSearch < 1.34.1	`CVE-2026-16612`	5.3 Medium	Duy Tran	Yes
2026-07-29 00:00	Easy Appointments < 3.12.28 - Authenticated (Subscriber+) Insecure Direct Object Reference Easy Appointments < 3.12.28	`CVE-2026-14224`	4.3 Medium	Duy Tran	Yes
2026-07-24 00:00	TaxoPress <= 3.50.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Private Post Disclosure Tag, Category, and Taxonomy Manager <= 3.50.0	`CVE-2026-15231`	4.3 Medium	Duy Tran	Yes
2026-06-18 00:00	Everest Forms <= 3.4.0 - Unauthenticated Information Exposure Everest Forms <= 3.4.0	`CVE-2026-11571`	5.3 Medium	Duy Tran	Yes
2026-06-15 00:00	Simple Membership <= 4.7.4 - Unauthenticated Stored Cross-Site Scripting Simple Membership <= 4.7.4	`CVE-2026-11855`	7.2 High	Duy Tran	Yes

Showing 1–5 of 5 reports