Nguyen Duy Quoc Khanh

Nguyen Duy Quoc Khanh is a security researcher credited with 16 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #298 of 3,515 contributors. Their disclosures were published between 2022 and 2023. The most productive year was 2022, with 15 findings.

Their research concentrates on Deserialization Of Untrusted Data, which accounts for 10 of their findings (63%). Other recurring categories include SQL Injection, Unrestricted Upload Of File With Dangerous Type. The average CVSS score across these disclosures is 7.4, peaking at 9.8. Severity breakdown: 1 critical and 15 high.

The most affected software includes Customizer Export/Import (2), WPtouch (2), Checkout Field Editor (Checkout… (1), across 14 distinct plugins, themes and core versions in total.

All 16 disclosed issues have since received a vendor fix. The most severe finding, "LearnPress <= 4.1.7.1 - Unauthenticated PHP Object Injection", scores 9.8 out of 10.

20222023

Critical

High

Medium

Low

Global Rank

#298

of 3,515 researchers

Vulns

Critical1

High15

Medium0

Low0

Affected Assets

14plugins

Avg CVSS

7.4

Average score of vulnerabilities

Researcher Submissions

16 records


2023-04-25 00:00	Customizer Export/Import <= 0.9.5 - Authenticated (Administrator+) PHP Object Injection Customizer Export/Import <= 0.9.5	`CVE-2023-1347`	7.2 High	Nguyen Duy Quoc Khanh	Yes
2022-12-19 00:00	WPtouch <= 4.3.44 - Authenticated (Administrator+) PHP Object Injection WPtouch <= 4.3.44	`CVE-2022-3417`	7.2 High	Nguyen Duy Quoc Khanh	Yes
2022-12-19 00:00	WPtouch <= 4.3.44 - Authenticated (Administrator+) Arbitrary File Upload WPtouch <= 4.3.44	`CVE-2022-3416`	7.2 High	Nguyen Duy Quoc Khanh	Yes
2022-11-17 00:00	Shortcodes and extra features for Phlox theme <= 2.10.5 - PHP Objection Injection Shortcodes and extra features… <= 2.10.5	`CVE-2022-3359`	7.2 High	Nguyen Duy Quoc Khanh	Yes
2022-11-14 00:00	Floating Chat Widget - Chaty <= 3.0.2 - Authenticated (Administrator+) SQL Injection Floating Chat Widget: Contact Chat Icons <= 3.0.2	`CVE-2022-3858`	7.2 High	Nguyen Duy Quoc Khanh	Yes
2022-11-08 00:00	Form Vibes <= 1.4.5 - Authenticated (Admininstrator+) SQL Injection Form Vibes <= 1.4.5	`CVE-2022-3764`	7.2 High	Nguyen Duy Quoc Khanh	Yes
2022-11-07 00:00	HTML Forms <= 1.3.24 - Authenticated (Administrator+) SQL Injection HTML Forms <= 1.3.24	`CVE-2022-3689`	7.2 High	Nguyen Duy Quoc Khanh	Yes
2022-11-07 00:00	Checkout Field Editor <= 1.7.2 - Authenticated (Admin+) PHP Object Injection Checkout Field Editor (Checkout… <= 1.7.2	`CVE-2022-3490`	8.0 High	Nguyen Duy Quoc Khanh	Yes
2022-10-10 00:00	Smart Slider 3 <= 3.5.1.9 - PHP Object Injection Smart Slider 3 <= 3.5.1.9	`CVE-2022-3357`	7.2 High	Nguyen Duy Quoc Khanh	Yes
2022-10-10 00:00	Ocean Extra <= 2.0.4 - Authenticated (Administrator+) PHP Object Injection Ocean Extra <= 2.0.4	`CVE-2022-3374`	7.2 High	Nguyen Duy Quoc Khanh	Yes

Showing 1–10 of 16 reports