CyberSecBulletin

Mykiot vulnerabilities

We track 1 vulnerability in Mykiot products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2025.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Mykiot vulnerabilities

  • 9.8 Critical severity

    KiotViet Sync: Unrestricted Upload of File with Dangerous Type

    CVE-2025-12674Mykiot

    The KiotViet Sync plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the create_media() function in all versions up to, and including, 1.8.5. This makes it possible for unauthenticated attackers to upload arbitr