Tran Nguyen Bao Khanh

Tran Nguyen Bao Khanh is a security researcher credited with 719 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #7 of 3,878 contributors. Their disclosures were published between 2025 and 2026. The most productive year was 2026, with 403 findings.

Their research concentrates on PHP Remote File Inclusion, which accounts for 341 of their findings (47%). Other recurring categories include Cross-Site Scripting, Deserialization Of Untrusted Data. The average CVSS score across these disclosures is 7.4, peaking at 9.8. Severity breakdown: 57 critical and 440 high.

The most affected software includes Togo (5), Wp EMember (4), xSmart - App Landing Page WordPress… (4), across 619 distinct plugins, themes and core versions in total.

218 of the 719 disclosed issues have a vendor fix, while 501 remain unpatched. The most severe finding, "Tonda Membership <= 1.0.1 - Unauthenticated Privilege Escalation", scores 9.8 out of 10.

20252026

Critical

High

Medium

Low

Global Rank

of 3,878 researchers

Vulns

719

Critical57

High440

Medium222

Low0

Affected Assets

715

90plugins625themes

Avg CVSS

7.4

Average score of vulnerabilities

Researcher Submissions

719 records


2026-10-09 00:00	Tonda Membership <= 1.0.1 - Unauthenticated Privilege Escalation Tonda Membership <= 1.0.1	`CVE-2026-62022`	9.8 Critical	Tran Nguyen Bao Khanh	No
2026-10-09 00:00	Angio <= 1.1.1 - Authenticated (Subscriber+) PHP Object Injection Angio - Creative Music Theme <= 1.1.1	`CVE-2026-62021`	7.5 High	Tran Nguyen Bao Khanh	No
2026-10-09 00:00	TouchUp < 1.4 - Unauthenticated Local File Inclusion TouchUp - Cosmetic and Plastic Surgery… < 1.4	`CVE-2026-62020`	8.1 High	Tran Nguyen Bao Khanh	Yes
2026-10-08 00:00	Ambed <= 1.0.0 - Reflected Cross-Site Scripting Ambed - Wallpapers & Painting Services… <= 1.0.0	`CVE-2026-62064`	6.1 Medium	Tran Nguyen Bao Khanh	No
2026-10-08 00:00	Ambient <= 1.7 - Unauthenticated Local File Inclusion Ambient - Modern Interior Design… <= 1.7	`CVE-2026-66566`	8.1 High	Tran Nguyen Bao Khanh	No
2026-10-08 00:00	FoodBakery <= 4.6 - Authenticated (Subscriber+) Arbitrary File Deletion FoodBakery <= 4.6	`CVE-2026-78530`	8.1 High	Tran Nguyen Bao Khanh	No
2026-10-08 00:00	LMS <= 8.3 - Unauthenticated Stored Cross-Site Scripting LMS - Education WordPress Theme <= 8.3	`CVE-2026-78532`	7.2 High	Tran Nguyen Bao Khanh	No
2026-10-08 00:00	Zeinet <= 1.0.0 - Reflected Cross-Site Scripting Zeinet - Internet Provider & Satellite… <= 1.0.0	`CVE-2026-93951`	6.1 Medium	Tran Nguyen Bao Khanh	No
2026-10-07 13:35	DK <= 3.2.1 - Missing Authorization DK <= 3.2.1	`CVE-2026-42706`	5.3 Medium	Tran Nguyen Bao Khanh	No
2026-10-07 00:00	Voldor <= 1.0.0 - Reflected Cross-Site Scripting Voldor - Welding & Metal Work… <= 1.0.0	`CVE-2026-94060`	6.1 Medium	Tran Nguyen Bao Khanh	No

Showing 1–10 of 250 reports

Showing the 250 most recent of 719 records. Every record has its own page and is listed in the sitemap.