Skip to contentKiotviet Sync vulnerabilities
- kiotviet sync, mykiot kiotviet sync +1 moreKiotViet Sync <= 1.8.5 - Use of Hard-coded Password to Authorization BypassCVE-2025-126765.3 Medium
- kiotviet sync, mykiot kiotviet sync +1 moreKiotViet Sync <= 1.8.5 - Missing Authorization to Authenticated (Subscriber+) Settings UpdateCVE-2025-126754.3 Medium
- kiotviet sync, mykiot kiotviet sync +1 moreKiotViet Sync <= 1.8.5 - Unauthenticated Arbitrary File UploadCVE-2025-12674Public exploit9.8 Critical
- kiotviet sync, mykiot kiotviet sync +1 moreKiotViet Sync <= 1.8.5 - Unauthenticated Webhook Key ExposureCVE-2025-126775.3 Medium
- kiotviet syncWordPress KiotViet Sync plugin <= 1.8.5 - Broken Access Control vulnerabilityCVE-2025-629784.3 Medium
- kiotviet syncWordPress KiotViet Sync plugin <= 1.8.4 - CSRF to Stored XSS vulnerabilityCVE-2025-393817.1 High
- kiotviet syncWordPress KiotViet Sync Plugin <= 1.8.3 - SQL Injection vulnerabilityCVE-2025-325738.5 High