High · 8.5 CVE-2025-32573 EUVD-2025-11688GHSA-rgfv-cmfv-jcmm

WordPress KiotViet Sync Plugin <= 1.8.3 - SQL Injection vulnerability

Published Apr 17, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kiotviet KiotViet Sync allows SQL Injection. This issue affects KiotViet Sync: from n/a through 1.8.3.

Affected products

Vendor	Product	Affected	Fixed
Kiotviet	KiotViet Sync	≤ 1.8.3	—

References

https://patchstack.com/database/wordpress/plugin/kiotvietsync/vulnerability/wordpress-kiotviet-sync-plugin-1-8-3-sql-injection-vulnerability?_s_id=cve vdb-entry