Nguyen Van Khanh

Nguyen Van Khanh is a security researcher credited with 18 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #278 of 3,515 contributors. Their disclosures were published between 2019 and 2022. The most productive year was 2021, with 10 findings.

Their research concentrates on SQL Injection, which accounts for 7 of their findings (39%). Other recurring categories include Cross-Site Scripting, Unrestricted Upload Of File With Dangerous Type. The average CVSS score across these disclosures is 7.0, peaking at 8.8. Severity breakdown: 0 critical and 12 high.

The most affected software includes Modern Events Calendar Lite (4), 301 Redirects (1), AccessPress Social Icons (1), across 15 distinct plugins, themes and core versions in total.

All 18 disclosed issues have since received a vendor fix. The most severe finding, "Quiz And Survey Master <= 7.1.11 - Authenticated SQL injection via shortcode", scores 8.8 out of 10.

2019202020212022

Critical

High

Medium

Low

Global Rank

#278

of 3,515 researchers

Vulns

Critical0

High12

Medium6

Low0

Affected Assets

13plugins2core versions

Avg CVSS

7.0

Average score of vulnerabilities

Researcher Submissions

18 records


2022-09-28 00:00	Asset CleanUp: Page Speed Booster <= 1.3.8.4 - Reflected Cross-Site Scripting Asset CleanUp <= 1.3.8.4	`CVE-2021-36899`	6.1 Medium	Nguyen Van Khanh	Yes
2022-06-10 08:45	Age Gate <= 2.17.0 - Cross-Site Scripting via Data Import Age Gate <= 2.17.0	`CVE-2021-36901`	7.2 High	Nguyen Van Khanh	Yes
2021-12-08 12:44	WP Google Map <= 1.8.0 - Missing Authorization Maps Plugin using Google Maps… <= 1.8.0	`CVE-2021-45729`	5.4 Medium	Nguyen Van Khanh	Yes
2021-03-26 00:00	Quiz And Survey Master <= 7.1.11 - Authenticated SQL injection via shortcode Quiz and Survey Master (QSM) <= 7.1.11	`CVE-2021-24221`	8.8 High	Nguyen Van Khanh	Yes
2021-02-18 00:00	Backup Guard <= 1.5.9 - Authenticated Arbitrary File Upload JetBackup <= 1.5.9	`CVE-2021-24155`	7.2 High	Nguyen Van Khanh	Yes
2021-02-13 00:00	Theme Editor <= 2.5 - Authenticated Arbitrary File Download Theme Editor <= 2.5	`CVE-2021-24154`	4.9 Medium	Nguyen Van Khanh	Yes
2021-02-01 00:00	WP Editor <= 1.2.6.3 - Authenticated (Admin+) SQL injection WP Editor <= 1.2.6.3	`CVE-2021-24151`	7.2 High	Nguyen Van Khanh	Yes
2021-01-29 00:00	Modern Events Calendar Lite <= 5.16.4 - Authenticated Arbitrary File Upload leading to Remote Code Execution Modern Events Calendar Lite <= 5.16.4	`CVE-2021-24145`	7.2 High	Nguyen Van Khanh	Yes
2021-01-29 00:00	Modern Events Calendar Lite <= 5.16.5 - Authenticated SQL Injection Modern Events Calendar Lite <= 5.16.5	`CVE-2021-24149`	8.8 High	Nguyen Van Khanh	Yes
2021-01-29 00:00	Modern Events Calendar Lite <= 5.16.4 - Unauthenticated Events Export Modern Events Calendar Lite <= 5.16.4	`CVE-2021-24146`	7.5 High	Nguyen Van Khanh	Yes

Showing 1–10 of 18 reports