Threats tagged 'ghsa-h8f7-hc62-fwj7'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.2%	CVE-2025-12675The KiotViet Sync plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability Medium4.3EPSS 0.2%2025-11-05GCVE DatabaseCVE-2025-12675 The KiotViet Sync plugin for WordPress up to version 1.8.5 has a vulnerability due to a missing capability check in the saveConfig() function. This flaw allows authenticated users with Subscriber-level access or higher to modify the plugin's configuration without proper authorization. EPSS 0.2%Report on CVE-2025-12675 Vulnerability CWE-862 #ghsa-h8f7-hc62-fwj7	GCVE Database	2025-11-05

Page 1 of 1