Nguyen Dinh Hai (HaiND)

Nguyen Dinh Hai (HaiND) is a security researcher credited with 26 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #229 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Missing Authorization, which accounts for 11 of their findings (42%). Other recurring categories include Cross-Site Scripting, SQL Injection. The average CVSS score across these disclosures is 6.4, peaking at 9.8. Severity breakdown: 3 critical and 9 high.

The most affected software includes IMPress for IDX Broker (2), Easy Invoice (1), Ezoic (1), across 25 distinct plugins, themes and core versions in total.

23 of the 26 disclosed issues have a vendor fix, while 3 remain unpatched. The most severe finding, "Kognetiks Chatbot <= 2.4.9 - Unauthenticated Arbitrary File Upload", scores 9.8 out of 10.

2026
Critical
High
Medium
Low
Global Rank

#229

of 3,823 researchers

Vulns

26

Critical3
High9
Medium14
Low0
Affected Assets

25

22plugins3themes
Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

26 records
2026-10-08 00:00CVE-2026-93949
4.3
Medium
Nguyen Dinh Hai (HaiND)No
2026-10-07 00:00CVE-2026-105883
4.3
Medium
Nguyen Dinh Hai (HaiND)Yes
2026-10-04 08:29CVE-2026-32574
7.2
High
Nguyen Dinh Hai (HaiND)No
2026-10-04 08:26CVE-2026-32579
9.8
Critical
Nguyen Dinh Hai (HaiND)Yes
2026-09-09 00:00CVE-2026-78536
5.3
Medium
Nguyen Dinh Hai (HaiND)Yes
2026-09-08 00:00CVE-2026-81788
4.3
Medium
Nguyen Dinh Hai (HaiND)Yes
2026-09-08 00:00CVE-2026-81787
5.3
Medium
Nguyen Dinh Hai (HaiND)Yes
2026-08-14 00:00CVE-2026-32481
9.8
Critical
Nguyen Dinh Hai (HaiND)Yes
2026-08-11 00:00CVE-2026-27536
7.2
High
Nguyen Dinh Hai (HaiND)Yes
2026-07-28 00:00CVE-2026-65542
5.3
Medium
Nguyen Dinh Hai (HaiND)No
Showing 1–10 of 26 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C