All products

kiotvietsync

WordPress · Plugin
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
KiotViet Sync <= 1.8.5 - Missing Authorization to Authenticated (Subscriber+) Settings UpdateCVE-2025-12675 kiotvietsync WordPress Medium No fix reported
KiotViet Sync <= 1.8.5 - Use of Hard-coded Password to Authorization BypassCVE-2025-12676 kiotvietsync WordPress Medium No fix reported
KiotViet Sync <= 1.8.5 - Unauthenticated Arbitrary File UploadCVE-2025-12674 kiotvietsync WordPress Critical No fix reported
KiotViet Sync <= 1.8.5 - Unauthenticated Webhook Key ExposureCVE-2025-12677 kiotvietsync WordPress Medium No fix reported
KiotViet Sync <= 1.8.5 - Missing AuthorizationCVE-2025-62978 kiotvietsync WordPress Medium No fix reported
KiotViet Sync <= 1.8.5 - Cross-Site Request Forgery to Stored Cross-Site ScriptingCVE-2025-39381 kiotvietsync WordPress Medium No fix reported
KiotViet Sync <= 1.8.4 - Authenticated (Subscriber+) SQL InjectionCVE-2025-32573 kiotvietsync WordPress Medium Fix reported