PT-2025-24013 · WordPress · Bm Content Builder

Name of the Vulnerable Software and Affected Versions: BM Content Builder plugin for WordPress versions up to, and including, 3.16.2.1 Description: The issue is related to a missing capability check on the ux cb page options save function, allowing authenticated attackers with subscriber-level...

PT-2025-24263 · WordPress · Vuong Nguyen Wp Security Master

Name of the Vulnerable Software and Affected Versions: Vuong Nguyen WP Security Master versions 1.0.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For Vuong...

PT-2025-24189

Name of the Vulnerable Software and Affected Versions ThemeHunk versions 1.1.1 and earlier Description The issue is related to missing authorization, allowing exploitation of incorrectly configured access control security levels. Recommendations For ThemeHunk versions 1.1.1 and earlier, update to...

PT-2025-24124

Name of the Vulnerable Software and Affected Versions CubePoints versions n/a through 3.2.1 Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations For versions n/a through 3.2.1, update to a version that includes a fix fo...

PT-2025-24091 · Oceanwp · Oceanwp Ocean Extra

Name of the Vulnerable Software and Affected Versions: OceanWP Ocean Extra versions 2.4.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicio...

PT-2025-24196 · Blocksera · Blocksera Image Hover Effects Block

Name of the Vulnerable Software and Affected Versions: Blocksera Image Hover Effects Block versions 1.4.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

PT-2025-24111 · Unknown · Whassan Ki Live Video Conferences

Name of the Vulnerable Software and Affected Versions: whassan KI Live Video Conferences versions 5.5.15 and earlier Description: The issue is related to a Missing Authorization vulnerability that allows exploiting incorrectly configured access control security levels. This can be exploited in...

PT-2025-24203 · Unknown · Nk Docspress

Name of the Vulnerable Software and Affected Versions: nK DocsPress versions through 2.5.2 Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For versions through 2.5.2,...

PT-2025-24186 · WordPress · Wp-Recall

Name of the Vulnerable Software and Affected Versions: WP-Recall versions prior to 16.26.14 Description: A Cross-Site Request Forgery CSRF issue allows Privilege Escalation. This is a type of attack where an attacker tricks a user into performing unintended actions on a web application that the...

PT-2025-24090 · Nasa Core · Nasa Core

Name of the Vulnerable Software and Affected Versions: Nasa Core versions prior to 6.4.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can inject malicious...

PT-2025-24160 · Mainwp · Wp Compress

Name of the Vulnerable Software and Affected Versions: WP Compress for MainWP versions through 6.30.32 Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations: For versions through...

JVN#10964289: Multiple surveillance cameras provided by i-PRO Co., Ltd. vulnerable to cross-site request forgery

Multiple surveillance cameras provided by i-PRO Co., Ltd. contain the following vulnerability. Cross-Site Request Forgery CSRF CWE-352 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Base Score 5.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Base Score 4.3 CVE-2025-36513 Impact I...

PT-2025-24226 · Cozmoslabs · Cozmoslabs Profile Builder

Name of the Vulnerable Software and Affected Versions: Cozmoslabs Profile Builder versions 3.13.8 and earlier Description: The issue is related to improper validation of specified quantity in input, which allows phishing. Recommendations: For Cozmoslabs Profile Builder versions 3.13.8 and earlier...

PT-2025-24185 · Unknown · Alessandro Piconi Simple Keyword To Link

Name of the Vulnerable Software and Affected Versions: Alessandro Piconi Simple Keyword to Link versions 1.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attac...

RHSA-2025:8530 Red Hat Security Advisory: webkit2gtk3 security update

Bulletin has no description...

RHSA-2025:8507 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

CVE-2025-5683

CVE-2025-5683 : A vulnerability in Qt image loading (qtimageformats) exists when parsing ICNS image files in QImage, leading to a crash. The issue affects Qt 6.3.0–6.5.9, 6.6.0–6.8.4, and 6.9.0. A fixed patch is available in Qt releases 6.5.10, 6.8.5, and 6.9.1. The connected security advisory/ N...

GHSA-862M-5253-832R Auth0 Wordpress Plugin vulnerable to Deserialization of Untrusted Data

Overview The Auth0 Wordpress plugin contains a critical vulnerability due to insecure deserialization of cookie data. If exploited, since SDKs process cookie content without prior authentication, a threat actor could send a specially crafted cookie containing malicious serialized data. Am I...

WordPress oik plugin <= 4.15.1 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Aiden in WordPress Plugin oik versions = 4.15.1...

PT-2025-23970 · Hewlett Packard · Hp Support Assistant

Name of the Vulnerable Software and Affected Versions: HP Support Assistant versions prior to 9.44.18.0 Description: A potential security issue has been identified that could allow a local attacker to escalate privileges via an arbitrary file write. Recommendations: For versions prior to 9.44.18....