CVE-2025-12675

MediumCVSS 4.3

Published: 05/11/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

9th percentile - higher than 9% of all known CVEs

Summary

The KiotViet Sync plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveConfig() function in all versions up to, and including, 1.8.5. This allows authenticated attackers with Subscriber-level access and above to update the plugin's config.

Risk Assessment

A low-privileged attacker can alter the plugin configuration, potentially causing malfunction or enabling further attacks. This affects the integrity of site data and configuration.

Recommendation

Update the KiotViet Sync plugin to a version later than 1.8.5. Consider restricting Subscriber-level roles if not needed.

Other vulnerabilities in KiotViet Sync WordPress plugin

CVE-2025-12676Medium
The KiotViet Sync plugin for WordPress is vulnerable to authorizarion bypass in all versions up to, and including, 1.8.5. This is due to the plugin using a hardcoded password for authentication in the QueryControllerAdmin::authenticated function. This makes it possible for unauthenticated attackers to create and sync products.

Original NVD description (English source)

The KiotViet Sync plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveConfig() function in all versions up to, and including, 1.8.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's config.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS