Duy Tran

Duy Tran is a security researcher credited with 9 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #562 of 3,917 contributors. The disclosure was published in 2026.

Their research concentrates on Missing Authorization, which accounts for 4 of their findings (44%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 5.2, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes BackWPup (1), Easy Appointments (1), Enable Media Replace (1), across 9 distinct plugins, themes and core versions in total.

All 9 disclosed issues have since received a vendor fix.

2026
Critical
High
Medium
Low
Global Rank

#562

of 3,917 researchers

Vulns

9

Critical0
High1
Medium8
Low0
Affected Assets

9

9plugins
Avg CVSS

5.2

Average score of vulnerabilities

Researcher Submissions

9 records
2026-10-27 18:45CVE-2026-85655
4.3
Medium
Duy TranYes
2026-10-19 00:00CVE-2026-15261
5.3
Medium
Duy TranYes
2026-10-14 00:00CVE-2026-104751
5.3
Medium
Duy TranYes
2026-10-08 00:00CVE-2026-86827
5.3
Medium
Duy TranYes
2026-08-25 00:00CVE-2026-16612
5.3
Medium
Duy TranYes
2026-07-29 00:00CVE-2026-14224
4.3
Medium
Duy TranYes
2026-07-24 00:00CVE-2026-15231
4.3
Medium
Duy TranYes
2026-06-18 00:00CVE-2026-11571
5.3
Medium
Duy TranYes
2026-06-15 00:00CVE-2026-11855
7.2
High
Duy TranYes
Showing 1–9 of 9 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C