Nguyen Cong Quang

Nguyen Cong Quang is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #963 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Scripting, which accounts for 3 of their findings (75%). Other recurring categories include Path Traversal. The average CVSS score across these disclosures is 6.6, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes Advanced Custom Fields (1), Advanced Popups (1), EmailKit (1), across 4 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#963

of 3,823 researchers

Vulns

Critical0

High1

Medium3

Low0

Affected Assets

4plugins

Avg CVSS

6.6

Average score of vulnerabilities

Researcher Submissions

4 records


2026-09-15 15:27	Advanced Popups <= 1.2.3 - Authenticated (Author+) Stored Cross-Site Scripting via 'Notification Button Link' Field Advanced Popups <= 1.2.3	`CVE-2026-11996`	6.4 Medium	Nguyen Cong Quang	Yes
2026-07-22 17:27	SUMO Reward Points for WooCommerce <= 32.7.0 - Unauthenticated Stored Cross-Site Scripting via 'reason' Parameter SUMO Reward Points for WooCommerce <= 32.7.0	`CVE-2026-7534`	7.2 High	Nguyen Cong Quang	Yes
2026-05-14 00:00	Advanced Custom Fields: Font Awesome Field <= 5.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via JSON Field Advanced Custom Fields <= 5.0.2	`CVE-2026-6415`	6.4 Medium	Nguyen Cong Quang	Yes
2026-05-04 14:47	EmailKit <= 1.6.5 - Authenticated (Author+) Arbitrary File Read via 'emailkit-editor-template' REST Parameter EmailKit <= 1.6.5	`CVE-2026-5957`	6.5 Medium	Nguyen Cong Quang	Yes

Showing 1–4 of 4 reports