Nguyen Truong (Roll)

20252026

Critical

High

Medium

Low

Global Rank

#543

of 3,238 researchers

Vulns

7

Critical0

High4

Medium3

Low0

Affected Assets

7

6plugins1theme

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

7 records


2026-07-28 21:25	Advanced Shipment Tracking for WooCommerce <= 3.9 - Authenticated (Shop Manager+) SQL Injection via 'tracking_provider' Parameter Advanced Shipment Tracking for WooComme… <= 3.9	`N/A`	7.2 High	Nguyen Truong (Roll)	Yes
2026-05-13 14:22	Unlimited Elements For Elementor <= 2.0.7 - Authenticated (Contributor+) SQL Injection via 'filter_search' Parameter Unlimited Elements For Elementor <= 2.0.7	`CVE-2026-5486`	6.5 Medium	Nguyen Truong (Roll)	Yes
2026-05-01 16:42	Ona <= 1.26 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'download_link' Parameter Ona <= 1.26	`CVE-2026-6812`	4.4 Medium	Nguyen Truong (Roll)	Yes
2026-02-10 11:56	Lucky Wheel Giveaway <= 1.0.22 - Authenticated (Administrator+) Remote Code Execution via 'conditional_tags' Parameter Lucky Wheel Giveaway <= 1.0.22	`CVE-2025-14541`	7.2 High	Nguyen Truong (Roll)	Yes
2026-01-13 16:50	Shipping Rates by City for WooCommerce <= 1.0.3 - Authenticated (Shop Manager+) SQL Injection via 'cities' Parameter Shipping Rates by City for WooCommerce <= 1.0.3	`CVE-2026-0678`	4.9 Medium	Nguyen Truong (Roll)	No
2025-12-29 23:11	Lucky Wheel for WooCommerce – Spin a Sale <= 1.1.13 - Authenticated (Administrator+) PHP Code Injection via Conditional Tags Lucky Wheel for WooCommerce <= 1.1.13	`CVE-2025-14509`	7.2 High	Nguyen Truong (Roll)	Yes
2025-09-09 00:00	Import any XML, CSV or Excel File to WordPress <= 3.9.3 - Authenticated (Admin+) Limited Unsafe File Upload WP All Import <= 3.9.3	`CVE-2025-10001`	7.2 High	Nguyen Truong (Roll)	Yes

Showing 1–7 of 7 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C