Threats tagged 'ghsa-f8wq-xr9h-w4f8'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.8%	CVE-2025-12674The KiotViet Sync plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in Critical9.8EPSS 0.8%2025-11-05GCVE DatabaseCVE-2025-12674 The KiotViet Sync plugin for WordPress contains a critical vulnerability in its create_media() function that allows unauthenticated attackers to upload arbitrary files due to missing file type validation. This vulnerability affects all versions up to and including 1.8.5. Exploitation could lead to remote code execution on the affected server. EPSS 0.8%Report on CVE-2025-12674 Vulnerability CWE-434 #ghsa-f8wq-xr9h-w4f8	GCVE Database	2025-11-05

Page 1 of 1