Tran Nguyen Bao Khanh
Tran Nguyen Bao Khanh is a security researcher credited with 694 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #8 of 3,515 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2026, with 382 findings.
Their research concentrates on PHP Remote File Inclusion, which accounts for 335 of their findings (48%). Other recurring categories include Cross-Site Scripting, Deserialization Of Untrusted Data. The average CVSS score across these disclosures is 7.4, peaking at 9.8. Severity breakdown: 56 critical and 425 high.
The most affected software includes Togo (5), Wp EMember (4), xSmart - App Landing Page WordPress… (4), across 596 distinct plugins, themes and core versions in total.
216 of the 694 disclosed issues have a vendor fix, while 478 remain unpatched. The most severe finding, "Jawn <= 1.4.2 - Unauthenticated Privilege Escalation", scores 9.8 out of 10.
#8
of 3,515 researchers
694
692
7.4
Average score of vulnerabilities
Researcher Submissions
Showing the 250 most recent of 694 records. Every record has its own page and is listed in the sitemap.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C