Nguyen Ngoc Quang Bach (maysbachs)

2025

Critical

High

Medium

Low

Global Rank

#136

of 3,248 researchers

Vulns

44

Critical0

High5

Medium39

Low0

Affected Assets

37

37plugins

Avg CVSS

5.5

Average score of vulnerabilities

Researcher Submissions

44 records


2025-12-08 00:00	ProfilePress <= 4.16.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution Paid Membership Plugin <= 4.16.7	`CVE-2025-13642`	5.4 Medium	Nguyen Ngoc Quang Bach (maysbachs)	Yes
2025-10-29 00:00	Translate WordPress and go Multilingual – Weglot <= 5.1 - Missing Authorization to Unauthenticated Limited Transient Deletion Translate WordPress with Weglot <= 5.1	`CVE-2025-10008`	5.3 Medium	Nguyen Ngoc Quang Bach (maysbachs)	Yes
2025-10-24 17:09	User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds <= 1.8.0 - Missing Authorization to Information Disclosure UserFeedback <= 1.8.0	`CVE-2025-10694`	5.3 Medium	Nguyen Ngoc Quang Bach (maysbachs)	Yes
2025-10-24 00:00	Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Widget Options <= 4.1.2	`CVE-2025-10580`	6.4 Medium	Nguyen Ngoc Quang Bach (maysbachs)	Yes
2025-09-26 14:16	Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Plugin Settings Update Ninja Forms <= 3.12.0	`CVE-2025-10499`	4.3 Medium	Nguyen Ngoc Quang Bach (maysbachs)	Yes
2025-09-26 14:15	Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Limited File Deletion Ninja Forms <= 3.12.0	`CVE-2025-10498`	4.3 Medium	Nguyen Ngoc Quang Bach (maysbachs)	Yes
2025-09-05 00:00	UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP <= 1.2.44 - Authenticated (Subscriber+) SQL Injection UsersWP <= 1.2.44	`CVE-2025-10003`	6.5 Medium	Nguyen Ngoc Quang Bach (maysbachs)	Yes
2025-08-13 00:00	Eventin <= 4.0.31 - Authenticated (Contributor+) PHP Object Injection Eventin <= 4.0.31	`CVE-2025-49869`	7.5 High	Nguyen Ngoc Quang Bach (maysbachs)	Yes
2025-08-11 00:00	CF7 Spreadsheets <= 2.3.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting CF7 Spreadsheets <= 2.3.2	`CVE-2025-50040`	6.4 Medium	Nguyen Ngoc Quang Bach (maysbachs)	No
2025-07-30 00:00	TheBooking <= 1.4.4 - Missing Authorization WordPress Booking Plugin <= 1.4.4	`CVE-2025-52801`	5.3 Medium	Nguyen Ngoc Quang Bach (maysbachs)	No

Showing 1–10 of 44 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C