Kiotviet vulnerabilities

Products

• Sync 7

Newest

• kiotviet sync, mykiot kiotviet sync +1 more KiotViet Sync <= 1.8.5 - Use of Hard-coded Password to Authorization Bypass CVE-2025-12676 5.3 MediumNovember 5, 2025
• kiotviet sync, mykiot kiotviet sync +1 more KiotViet Sync <= 1.8.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update CVE-2025-12675 4.3 MediumNovember 5, 2025
• kiotviet sync, mykiot kiotviet sync +1 more KiotViet Sync <= 1.8.5 - Unauthenticated Arbitrary File Upload CVE-2025-12674 Public exploit 9.8 CriticalNovember 5, 2025
• kiotviet sync, mykiot kiotviet sync +1 more KiotViet Sync <= 1.8.5 - Unauthenticated Webhook Key Exposure CVE-2025-12677 5.3 MediumNovember 5, 2025
• kiotviet sync WordPress KiotViet Sync plugin <= 1.8.5 - Broken Access Control vulnerability CVE-2025-62978 4.3 MediumOctober 27, 2025
• kiotviet sync WordPress KiotViet Sync plugin <= 1.8.4 - CSRF to Stored XSS vulnerability CVE-2025-39381 7.1 HighApril 24, 2025
• kiotviet sync WordPress KiotViet Sync Plugin <= 1.8.3 - SQL Injection vulnerability CVE-2025-32573 8.5 HighApril 17, 2025