Tin Duong

Tin Duong is a security researcher credited with 10 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #424 of 3,515 contributors. Their disclosures were published between 2019 and 2020. The most productive year was 2019, with 9 findings.

Their research concentrates on SQL Injection, which accounts for 10 of their findings (100%). The average CVSS score across these disclosures is 9.5, peaking at 9.8. Severity breakdown: 9 critical and 1 high.

The most affected software includes AdRotate Banner Manager (1), Advanced Contact form 7 DB (1), Blog2Social (1), across 10 distinct plugins, themes and core versions in total.

All 10 disclosed issues have since received a vendor fix. The most severe finding, "Advanced Contact Form 7 DB <= 1.6.2 - SQL Injection", scores 9.8 out of 10.

20192020

Critical

High

Medium

Low

Global Rank

#424

of 3,515 researchers

Vulns

Critical9

High1

Medium0

Low0

Affected Assets

10plugins

Avg CVSS

9.5

Average score of vulnerabilities

Researcher Submissions

10 records


2020-09-22 00:00	Advanced Contact Form 7 DB <= 1.6.2 - SQL Injection Advanced Contact form 7 DB <= 1.6.2	`CVE-2019-13571`	9.8 Critical	Tin Duong	Yes
2019-08-27 00:00	NextGEN Gallery <= 3.2.10 - SQL Injection Photo Gallery < 3.2.11	`CVE-2019-14314`	9.8 Critical	Tin Duong	Yes
2019-08-12 00:00	GiveWP - Donation Plugin and Fundraising Platform <= 2.5.0 - SQL Injection GiveWP <= 2.5.0	`CVE-2019-13578`	9.8 Critical	Tin Duong	Yes
2019-08-06 00:00	Popup Builder <= 3.44 - SQL Injection Popup Builder <= 3.44	`CVE-2019-14695`	9.8 Critical	Tin Duong	Yes
2019-07-26 00:00	Photo Gallery by 10Web <= 1.5.30 - SQL Injection Photo Gallery by 10Web < 1.5.31	`CVE-2019-14313`	9.8 Critical	Tin Duong	Yes
2019-07-25 00:00	Blog2Social: Social Media Auto Post & Scheduler <= 5.5.0 - SQL Injection Blog2Social < 5.6.0	`CVE-2019-13572`	9.8 Critical	Tin Duong	Yes
2019-07-22 00:00	Email Subscribers & Newsletters <= 4.1.7 - SQL Injection Email Subscribers & Newsletters <= 4.1.7	`CVE-2019-13569`	9.8 Critical	Tin Duong	Yes
2019-07-18 00:00	Contact Form, Drag and Drop Form Builder for WordPress – Everest Forms <= 1.4.9 - SQL Injection Everest Forms < 1.5.0	`CVE-2019-13575`	9.8 Critical	Tin Duong	Yes
2019-07-11 00:00	FV Flowplayer Video Player <= 7.3.18.727 - SQL Injection FV Flowplayer Video Player <= 7.3.18.727	`CVE-2019-13573`	9.8 Critical	Tin Duong	Yes
2019-07-11 00:00	AdRotate – Ad manager & AdSense Ads <= 5.2 - Authenticated SQL Injection AdRotate Banner Manager <= 5.2	`CVE-2019-13570`	7.2 High	Tin Duong	Yes

Showing 1–10 of 10 reports