Nguyen Kim Sang

2025

Critical

High

Medium

Low

Global Rank

#329

of 3,238 researchers

Vulns

14

Critical0

High4

Medium10

Low0

Affected Assets

13

13plugins

Avg CVSS

5.8

Average score of vulnerabilities

Researcher Submissions

14 records


2025-09-23 00:00	HieCOR Payment Gateway Plugin <= 1.5.11 - Unauthenticated SQL Injection HieCOR Payment Gateway Plugin <= 1.5.11	`CVE-2025-52773`	7.5 High	Nguyen Kim Sang	Yes
2025-08-15 00:00	School Management <= 93.2.0 - Missing Authorization School Management System for Wordpress <= 93.2.0	`CVE-2025-48108`	4.3 Medium	Nguyen Kim Sang	No
2025-07-24 00:00	WooCommerce Point Of Sale (POS) <= 1.4 - Authenticated (Subscriber+) SQL Injection WooCommerce Point Of Sale (POS) <= 1.4	`CVE-2025-52820`	6.5 Medium	Nguyen Kim Sang	No
2025-07-08 00:00	Pakke Envíos <= 1.0.2 - Authenticated (Subscriber+) SQL Injection Pakke Envíos <= 1.0.2	`CVE-2025-52819`	6.5 Medium	Nguyen Kim Sang	No
2025-06-27 00:00	YaySMTP <= 2.6.6 - Authenticated (Administrator+) SQL Injection YaySMTP <= 2.6.6	`CVE-2025-53256`	4.9 Medium	Nguyen Kim Sang	Yes
2025-06-23 00:00	DirectIQ Email Marketing <= 2.0 - Unauthenticated SQL Injection DirectIQ Email Marketing <= 2.0	`CVE-2025-52829`	7.5 High	Nguyen Kim Sang	No
2025-06-19 00:00	AutomatorWP <= 5.2.4 - Authenticated (Administrator+) SQL Injection AutomatorWP <= 5.2.4	`CVE-2025-68561`	4.9 Medium	Nguyen Kim Sang	Yes
2025-06-19 00:00	File Manager Pro <= 1.8.8 - Authenticated (Administrator+) Stored Cross-Site Scripting File Manager Pro <= 1.8.8	`CVE-2025-52710`	4.4 Medium	Nguyen Kim Sang	Yes
2025-06-14 00:00	SMS <= 6.9.12 - Authenticated (Administrator+) SQL Injection WSMS (formerly WP SMS) <= 6.9.12	`CVE-2026-28136`	4.9 Medium	Nguyen Kim Sang	Yes
2025-06-12 00:00	PostaPanduri <= 2.1.3 - Unauthenticated SQL Injection PostaPanduri <= 2.1.3	`CVE-2025-49452`	7.5 High	Nguyen Kim Sang	Yes

Showing 1–10 of 14 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C