PT-2025-24129 · WordPress · Free Wp Mail Smtp

Name of the Vulnerable Software and Affected Versions: Free WP Mail SMTP versions 1.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and...

PT-2025-24131 · Woocommerce · Subscription Renewal Reminders For Woocommerce

Name of the Vulnerable Software and Affected Versions: Subscription Renewal Reminders for WooCommerce versions 1.3.7 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This means an attacker can trick a user into...

PT-2025-24238 · Unknown · M A Vinoth Kumar Frontend Dashboard

Name of the Vulnerable Software and Affected Versions: M A Vinoth Kumar Frontend Dashboard versions n/a through 2.2.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS in the Frontend Dashboard...

PT-2025-24202 · Woocommerce · Print Invoice & Delivery Notes For Woocommerce

Name of the Vulnerable Software and Affected Versions: Print Invoice & Delivery Notes for WooCommerce versions 5.5.0 and earlier Description: A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed. This can lead to security breaches where an attacker can trick a user...

PT-2025-24215 · Mario Peshev · Wp-Crm System

Name of the Vulnerable Software and Affected Versions: Mario Peshev WP-CRM System versions 3.4.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by Access Control Lists ACLs. This means that...

PT-2025-24292 · Qnap · Qnap Quts Hero +1

Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.2.4.3079 build 20250321 QNAP QuTS hero versions prior to h5.2.4.3079 build 20250321 Description: A command injection issue has been reported, affecting several QNAP operating system versions. This could allow remo...

PT-2025-24220 · WordPress · Wp Legal Pages Wp Cookie Notice

Name of the Vulnerable Software and Affected Versions: WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions n/a through 3.8.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. This means an attacker can trick ...

PT-2025-24142 · Unknown · Shawonpro Socialmark

Name of the Vulnerable Software and Affected Versions: ShawonPro SocialMark versions 2.0.7 and earlier Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. Recommendations: For ShawonPro SocialMark versions 2.0.7 and...

PT-2025-24293 · Qnap · Qsync Central

Name of the Vulnerable Software and Affected Versions: Qsync Central versions prior to 4.5.0.6 Description: A use of externally-controlled format string vulnerability has been reported. If exploited, the vulnerability could allow remote attackers who have gained user access to obtain secret data ...

PT-2025-24308 · Synology · File Station

Name of the Vulnerable Software and Affected Versions: File Station 5 versions prior to 5.5.6.4847 Description: A path traversal issue has been reported, allowing a remote attacker with a user account to read the contents of unexpected files or system data. Recommendations: For versions prior to...

PT-2025-24296 · Synology · File Station

Name of the Vulnerable Software and Affected Versions: File Station 5 versions prior to 5.5.6.4847 Description: A NULL pointer dereference issue allows a remote attacker with a user account to launch a denial-of-service DoS attack. Recommendations: For versions prior to 5.5.6.4847, update to...

PT-2025-24155 · Unknown · Powie'S Uptime Robot

Name of the Vulnerable Software and Affected Versions: Powie's Uptime Robot versions 0.9.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject...

PT-2025-24218 · Google +1 · Recaptcha +1

Name of the Vulnerable Software and Affected Versions: Matthias Nordwig Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant versions n/a through 4.1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. This is a...

PT-2025-24098 · Ancorathemes · Ancorathemes Mr. Murphy

Name of the Vulnerable Software and Affected Versions: AncoraThemes Mr. Murphy versions prior to 1.2.12.1 Description: The issue is related to Deserialization of Untrusted Data, allowing Object Injection. This can be exploited due to the deserialization of untrusted data, which enables an attacke...

PT-2025-24290

Name of the Vulnerable Software and Affected Versions License Center versions prior to 1.9.49 Description A cross-site scripting XSS vulnerability has been reported. If exploited, the vulnerability could allow remote attackers who have gained user access to bypass security mechanisms or read...

PT-2025-24053 · Apache · Apache Server

Name of the Vulnerable Software and Affected Versions: Apache Server versions prior to the fixed version Description: An improper neutralization of inputs used in expression language allows remote code execution with the highest privileges on the server. This issue affects the Apache Server,...

PT-2025-24303 · Synology · File Station

Name of the Vulnerable Software and Affected Versions: File Station 5 versions prior to 5.5.6.4791 Description: An improper certificate validation issue has been reported, potentially allowing remote attackers with user access to compromise system security. Recommendations: For versions prior to...

PT-2025-24260 · Unknown · Ryan Burnette Video Embeds

Name of the Vulnerable Software and Affected Versions: Ryan Burnette Video Embeds versions 0.1.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS attacks. This means that an attacker can inject malicious...

PT-2025-24149 · Codehaveli · Codehaveli Bitly Url Shortener

Name of the Vulnerable Software and Affected Versions: Codehaveli Bitly URL Shortener versions 1.3.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. Recommendations: For Codehaveli Bitly URL Shortener versions 1.3...

PT-2025-24099

Name of the Vulnerable Software and Affected Versions Axiomthemes Sweet Dessert versions prior to 1.1.13 Description The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This can potentially lead to security breaches. Recommendations For versions prior to...