What’s Vulnerable › Products

KiotViet Sync vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your KiotViet Sync version is affected

Latest KiotViet Sync vulnerabilities

• CVE-2025-62978 — WordPress KiotViet Sync plugin <= 1.8.5 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2025-39381 — WordPress KiotViet Sync plugin <= 1.8.4 - CSRF to Stored XSS vulnerability (CVSS 7.1)
• CVE-2025-32573 — WordPress KiotViet Sync Plugin <= 1.8.3 - SQL Injection vulnerability (CVSS 8.5)