To Quang Duong

To Quang Duong is a security researcher credited with 10 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #430 of 3,515 contributors. The disclosure was published in 2021.

Their research concentrates on SQL Injection, which accounts for 10 of their findings (100%). The average CVSS score across these disclosures is 8.2, peaking at 8.8. Severity breakdown: 0 critical and 10 high.

The most affected software includes FAQ Builder AYS (1), Image Slider by Ays- Responsive Slider… (1), Photo Gallery by Ays (1), across 10 distinct plugins, themes and core versions in total.

All 10 disclosed issues have since received a vendor fix. The most severe finding, "Popup Like box – Page Plugin < 3.5.3 - SQL Injection", scores 8.8 out of 10.

2021

Critical

High

Medium

Low

Global Rank

#430

of 3,515 researchers

Vulns

Critical0

High10

Medium0

Low0

Affected Assets

10plugins

Avg CVSS

8.2

Average score of vulnerabilities

Researcher Submissions

10 records


2021-06-29 00:00	Poll Maker <= 3.2.0 - SQL Injection Poll Maker by AYS < 3.2.1	`CVE-2021-24483`	7.2 High	To Quang Duong	Yes
2021-06-29 00:00	Quiz Maker <= 6.2.0.8 - SQL Injection Quiz Maker by AYS < 6.2.0.9	`CVE-2021-24456`	7.2 High	To Quang Duong	Yes
2021-06-29 00:00	Popup Like box – Page Plugin < 3.5.3 - SQL Injection Popup Like box <= 3.5.2	`CVE-2021-24460`	8.8 High	To Quang Duong	Yes
2021-06-29 00:00	Portfolio Responsive Gallery <= 1.1.7 - Blind SQL Injection Portfolio Responsive Gallery <= 1.1.7	`CVE-2021-24457`	8.8 High	To Quang Duong	Yes
2021-06-29 00:00	Photo Gallery by Ays - Responsive Image Gallery <= 4.4.3 - Authenticated Blind SQL Injections Photo Gallery by Ays < 4.4.4	`CVE-2021-24462`	7.2 High	To Quang Duong	Yes
2021-06-29 00:00	Image Slider by Ays- Responsive Slider and Carousel < 2.5.0 - SQL Injection Image Slider by Ays- Responsive Slider… < 2.5.0	`CVE-2021-24463`	8.8 High	To Quang Duong	Yes
2021-06-29 00:00	Secure Copy Content Protection and Content Locking <= 2.6.6 - SQL Injection Secure Copy Content Protection… < 2.6.7	`CVE-2021-24484`	7.2 High	To Quang Duong	Yes
2021-06-29 00:00	FAQ Builder AYS <= 1.3.5 - Blind SQL Injection FAQ Builder AYS <= 1.3.5	`CVE-2021-24461`	8.8 High	To Quang Duong	Yes
2021-06-29 00:00	Popup box < 2.3.4 - Authenticated SQL Injection Popup Box < 2.3.4	`CVE-2021-24458`	8.8 High	To Quang Duong	Yes
2021-06-29 00:00	Survey Maker < 1.5.6 - Authenticated SQL Injection Survey Maker by AYS < 1.5.6	`CVE-2021-24459`	8.8 High	To Quang Duong	Yes

Showing 1–10 of 10 reports