Kiotviet
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| KiotViet Sync | 3 | – | Oct 27, 2025 |
Exploited and recent CVEs
- CVE-2025-62978 WordPress KiotViet Sync plugin <= 1.8.5 - Broken Access Control vulnerability 0.2%
- CVE-2025-39381 WordPress KiotViet Sync plugin <= 1.8.4 - CSRF to Stored XSS vulnerability 0.2%
- CVE-2025-32573 WordPress KiotViet Sync Plugin <= 1.8.3 - SQL Injection vulnerability 0.4%