khanhhnahk1

khanhhnahk1 is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #716 of 3,515 contributors. The disclosure was published in 2025.

Their research concentrates on External Control Of File Name Or Path, which accounts for 2 of their findings (40%). Other recurring categories include Authentication Bypass Using An Alternate Path Or Channel, Path Traversal. The average CVSS score across these disclosures is 8.5, peaking at 9.8. Severity breakdown: 2 critical and 3 high.

The most affected software includes Aiomatic - Automatic AI Content Writer… (1), CLEVER - HTML5 Radio Player… (1), Search & Go - Directory WordPress Theme (1), across 5 distinct plugins, themes and core versions in total.

All 5 disclosed issues have since received a vendor fix. The most severe finding, "Search & Go - Directory WordPress Theme <= 2.7 - Authentication Bypass to Privilege Escalation via Account Takeover", scores 9.8 out of 10.