Nguyen Quang Truong

Nguyen Quang Truong is a security researcher credited with 5 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #742 of 3,333 contributors. The disclosure was published in 2026.

Their research concentrates on Code Injection, which accounts for 1 of their findings (20%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization. The average CVSS score across these disclosures is 5.8, peaking at 7.5. Severity breakdown: 0 critical and 2 high.

The most affected software includes affiliate-toolkit (1), Block for Mailchimp (1), MDTF (1), across 5 distinct plugins, themes and core versions in total.

4 of the 5 disclosed issues have a vendor fix, while 1 remain unpatched.

2026

Critical

High

Medium

Low

Global Rank

#742

of 3,333 researchers

Vulns

Critical0

High2

Medium3

Low0

Affected Assets

5plugins

Avg CVSS

5.8

Average score of vulnerabilities

Researcher Submissions

5 records


2026-07-28 21:18	WP CTA <= 2.1.2 - Authenticated (Administrator+) Server-Side Request Forgery WP CTA 2.1.2	`CVE-2026-6089`	4.9 Medium	Nguyen Quang Truong	Yes
2026-06-26 00:00	Paid Memberships Pro - Add Member From Admin <= 0.7.2 - Cross-Site Request Forgery Paid Memberships Pro - Add Member From… <= 0.7.2	`CVE-2026-57659`	4.3 Medium	Nguyen Quang Truong	Yes
2026-06-25 00:00	Block for Mailchimp – Add Email Subscription Forms and Collect Leads <= 1.1.15 - Missing Authorization Block for Mailchimp <= 1.1.15	`CVE-2026-56063`	5.3 Medium	Nguyen Quang Truong	Yes
2026-06-18 00:00	MDTF – Meta Data and Taxonomies Filter <= 1.3.7 - Unauthenticated SQL Injection MDTF <= 1.3.7	`CVE-2026-54843`	7.5 High	Nguyen Quang Truong	Yes
2026-05-26 17:32	affiliate-toolkit <= 3.8.5 - Authenticated (Editor+) Remote Code Execution affiliate-toolkit <= 3.8.4	`CVE-2026-6169`	7.2 High	Nguyen Quang Truong	No

Showing 1–5 of 5 reports