https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 07:23:25 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-286840 EUVD-2026-286840 https://cve.radiocsirt.org/vuln/euvd-2026-286840 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12676 <p>The KiotViet Sync plugin for WordPress is vulnerable to authorizarion bypass in all versions up to, and including, 1.8.5. This is due to the plugin using a hardcoded password for authentication in the QueryControllerAdmin::authenticated function. This makes it possible for unauthenticated attackers to create and sync products.</p> <p>The KiotViet Sync plugin for WordPress is vulnerable to authorizarion bypass in all versions up to, and including, 1.8.5. This is due to the plugin using a hardcoded password for authentication in the QueryControllerAdmin::authenticated function. This makes it possible for unauthenticated attackers to create and sync products.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-12676 https://cve.radiocsirt.org/vuln/ghsa-6rw4-g9p6-qw7p <p>The KiotViet Sync plugin for WordPress is vulnerable to authorizarion bypass in all versions up to, and including, 1.8.5. This is due to the plugin using a hardcoded password for authentication in the QueryControllerAdmin::authenticated function. This makes it possible for unauthenticated attackers to create and sync products.</p> <p>The KiotViet Sync plugin for WordPress is vulnerable to authorizarion bypass in all versions up to, and including, 1.8.5. This is due to the plugin using a hardcoded password for authentication in the QueryControllerAdmin::authenticated function. This makes it possible for unauthenticated attackers to create and sync products.</p> https://cve.radiocsirt.org/vuln/ghsa-6rw4-g9p6-qw7p