Phap Nguyen Anh

2026

Critical

High

Medium

Low

Global Rank

#516

of 3,238 researchers

Vulns

8

Critical0

High2

Medium4

Low2

Affected Assets

8

8plugins

Avg CVSS

4.8

Average score of vulnerabilities

Researcher Submissions

8 records


2026-03-20 15:20	Post Affiliate Pro <= 1.28.0 - Authenticated (Administrator+) Server-Side Request Forgery via 'Post Affiliate Pro URL' Field Post Affiliate Pro <= 1.28.0	`CVE-2026-2290`	3.8 Low	Phap Nguyen Anh	No
2026-03-03 12:44	Morkva UA Shipping <= 1.7.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Weight, kg' Field morkva UA Shipping <= 1.7.9	`CVE-2026-2292`	4.4 Medium	Phap Nguyen Anh	Yes
2026-03-03 12:40	Taskbuilder <= 5.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Block Emails' Field Taskbuilder <= 5.0.3	`CVE-2026-2289`	4.4 Medium	Phap Nguyen Anh	Yes
2026-02-17 18:40	Product Addons for Woocommerce – Product Options with Custom Fields <= 3.1.0 - Authenticated (Shop Manager+) Code Injection via Conditional Logic 'operator' Parameter Product Addons for Woocommerce <= 3.1.0	`CVE-2026-2296`	7.2 High	Phap Nguyen Anh	Yes
2026-02-17 18:22	Cart All In One For WooCommerce <= 1.1.21 - Authenticated (Administrator+) Code Injection via 'sc_assign_page' Setting Cart All In One For WooCommerce <= 1.1.21	`CVE-2026-2019`	7.2 High	Phap Nguyen Anh	Yes
2026-01-16 14:51	Church Admin <= 5.0.28 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'audio_url' Parameter Church Admin <= 5.0.28	`CVE-2026-0682`	2.2 Low	Phap Nguyen Anh	Yes
2026-01-16 14:11	Filr – Secure document library <= 1.2.11 - Authenticated (Administrator+) Stored Cross-Site Scripting via HTML Upload Filr <= 1.2.11	`CVE-2025-14632`	4.4 Medium	Phap Nguyen Anh	Yes
2026-01-16 00:00	CM E-Mail Blacklist <= 1.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'black_email' Parameter CM E-Mail Blacklist <= 1.6.2	`CVE-2026-0691`	4.4 Medium	Phap Nguyen Anh	Yes

Showing 1–8 of 8 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C