Threats tagged 'ghsa-48mf-wgq9-gwrv'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2025-12677The KiotViet Sync plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and Medium5.3EPSS 0.3%2025-11-05GCVE DatabaseCVE-2025-12677 The KiotViet Sync plugin for WordPress versions up to and including 1.8.5 contains a vulnerability that allows unauthenticated attackers to expose sensitive information. Specifically, the webhook token can be extracted via the register_api_route() function in the plugin's WebHookAction.php file. This vulnerability is classified as Sensitive Information Exposure and has a CVSS score of 5.3 (medium severity). EPSS 0.3%Report on CVE-2025-12677 Vulnerability CWE-200 #ghsa-48mf-wgq9-gwrv	GCVE Database	2025-11-05

Page 1 of 1