Nguyen Ba Khanh

Nguyen Ba Khanh is a security researcher credited with 137 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #57 of 3,899 contributors. The disclosure was published in 2026.

Their research concentrates on Improper Neutralization Of Input During Web Page Generation, which accounts for 54 of their findings (39%). Other recurring categories include Missing Authorization, Improper Neutralization Of Special Elements Used In An SQL Command. The average CVSS score across these disclosures is 6.5, peaking at 9.8. Severity breakdown: 4 critical and 62 high.

The most affected software includes Blocksy Companion Pro (3), Cornerstone (2), Geeky Bot (2), across 130 distinct plugins, themes and core versions in total.

128 of the 137 disclosed issues have a vendor fix, while 9 remain unpatched. The most severe finding, "Blocksy Companion <= 2.1.46 - Unauthenticated Arbitrary File Upload via 'blc-review-images[]' Parameter", scores 9.8 out of 10.

2026
Critical
High
Medium
Low
Global Rank

#57

of 3,899 researchers

Vulns

137

Critical4
High62
Medium71
Low0
Affected Assets

130

127plugins3themes
Avg CVSS

6.5

Average score of vulnerabilities

Researcher Submissions

137 records
2026-10-13 00:00CVE-2026-105065
6.1
Medium
Nguyen Ba KhanhYes
2026-10-09 12:52CVE-2026-62034
7.2
High
Nguyen Ba KhanhYes
2026-10-08 16:38CVE-2026-106609
5.3
Medium
Nguyen Ba KhanhYes
2026-10-05 08:05CVE-2026-104409
6.4
Medium
Nguyen Ba KhanhYes
2026-10-05 00:00CVE-2026-42635
7.2
High
Nguyen Ba KhanhNo
2026-10-04 08:36CVE-2026-32568
8.8
High
Nguyen Ba KhanhNo
2026-10-04 08:35CVE-2026-32571
6.4
Medium
Nguyen Ba KhanhNo
2026-10-04 00:00CVE-2026-32557
7.5
High
Nguyen Ba KhanhNo
2026-10-04 00:00CVE-2026-32570
6.1
Medium
Nguyen Ba KhanhNo
2026-10-03 00:00CVE-2026-96761
7.2
High
Nguyen Ba KhanhYes
Showing 1–10 of 137 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C