12714 matches found
PT-2025-21993 · Woocommerce · Redefiningtheweb Dynamic Pricing & Discounts Lite
Name of the Vulnerable Software and Affected Versions: RedefiningTheWeb Dynamic Pricing & Discounts Lite for WooCommerce versions through 2.0.3 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions. Recommendations: For versions through 2.0.3,...
PT-2025-21966 · Woocommerce · Change Woocommerce Add To Cart Button Text
Name of the Vulnerable Software and Affected Versions: Change Add to Cart Button Text for WooCommerce versions n/a through 2.2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...
PT-2025-21951 · Woocommerce · Nc Wishlist For Woocommerce
Name of the Vulnerable Software and Affected Versions: Wishlist for WooCommerce versions prior to 3.2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...
PT-2025-21950 · Bunny.Net · Bunny.Net
Name of the Vulnerable Software and Affected Versions: bunny.net versions n/a through 2.3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This exposes users to cyber attacks and...
PT-2025-22025 · Woocommerce · Category Slider For Woocommerce
Name of the Vulnerable Software and Affected Versions: Product Category Slider for WooCommerce versions through 4.3.4 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion'. This allows for PHP...
PT-2025-21963 · WordPress · Wpfactory Additional Custom Emails & Recipients For Woocommerce
Name of the Vulnerable Software and Affected Versions: WPFactory Additional Custom Emails & Recipients for WooCommerce versions 3.5.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for...
PT-2025-22067 · WordPress · Quantumcloud Wpbot Pro
Name of the Vulnerable Software and Affected Versions: QuantumCloud WPBot Pro Wordpress Chatbot versions n/a through 12.7.0 Description: The issue is related to the deserialization of untrusted data, allowing object injection in the QuantumCloud WPBot Pro Wordpress Chatbot. This can be exploited...
PT-2025-22116 · Broadcom · Automic Automation Agent
Name of the Vulnerable Software and Affected Versions: Broadcom Automic Automation Agent Unix versions 24.3.0 HF4 and 21.0.13 HF1 Description: The issue allows low-privileged users with execution rights on the agent executable to escalate their privileges. This is a privilege escalation issue tha...
PT-2025-22075 · Mojoomla · Wpams
Name of the Vulnerable Software and Affected Versions: mojoomla WPAMS versions prior to 44.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...
PT-2025-22101 · WordPress · Elbisnero Wordpress Events Calendar Registration & Tickets
Name of the Vulnerable Software and Affected Versions: elbisnero WordPress Events Calendar Registration & Tickets versions 2.6.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for...
PT-2025-21989 · Elementor · Elementinvader Addons For Elementor
Name of the Vulnerable Software and Affected Versions: ElementInvader Addons for Elementor versions 1.3.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...
PT-2025-22090 · Themegoods · Themegoods Altair
Name of the Vulnerable Software and Affected Versions: ThemeGoods Altair versions n/a through 5.2.2 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions n/a through 5.2.2, update to a version later than 5.2.2 to resol...
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2025-1491)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
laravel-auth0 SDK Vulnerable to Brute Force Authentication Tags of CookieStore Sessions
Overview Session cookies of applications using the laravel-auth0 SDK configured with CookieStore have authentication tags that can be brute forced, which may result in unauthorized access. Am I Affected? You are affected by this vulnerability if you meet the following pre-conditions: 1...
CGA-7M4Q-7233-P368
Bulletin has no description...
OPENSUSE-SU-2025:15105-1 python311-suds-1.2.0-2.4 on GA media
These are all security issues fixed in the python311-suds-1.2.0-2.4 package on the GA media of openSUSE Tumbleweed...
PT-2025-21811
Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 138.0.4 Firefox ESR versions prior to 128.10.1 Description: An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. Recommendations: For Firefox versions...
OPENSUSE-SU-2025:15099-1 python311-nltk-3.9.1-2.4 on GA media
These are all security issues fixed in the python311-nltk-3.9.1-2.4 package on the GA media of openSUSE Tumbleweed...