PT-2025-20098 · Unknown · Testimonial Slider

Name of the Vulnerable Software and Affected Versions: GS Testimonial Slider versions 3.3.0 and earlier Description: The issue is related to a Missing Authorization vulnerability in GS Plugins GS Testimonial Slider, which allows exploiting incorrectly configured access control security levels...

PT-2025-20213 · Woobox · Woobox

Name of the Vulnerable Software and Affected Versions: Woobox versions 1.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For versions 1.6 and...

PT-2025-20106 · Elementor · Cost Calculator For Elementor

Name of the Vulnerable Software and Affected Versions: Cost Calculator for Elementor versions 1.3.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows for DOM-Based XSS. This means that an...

PT-2025-20212 · Unknown · Codemstory

Name of the Vulnerable Software and Affected Versions: codemstory versions 5.2.11 and earlier Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Cross-Site Request Forgery. This problem affects the software by potentially allowing unauthorized...

PT-2025-20090 · Unknown · Wp Gravity Forms Zendesk

Name of the Vulnerable Software and Affected Versions: WP Gravity Forms Zendesk versions 1.1.2 and earlier Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, which can be used for Phishing attacks. Recommendations: For WP...

PT-2025-20096 · Blocksy · Blocksy

Name of the Vulnerable Software and Affected Versions: Blocksy versions 2.0.97 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Blocksy versions 2.0.97 and...

PT-2025-20251 · Cisco · Cisco Ios Xr +2

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software affected versions not specified Cisco IOS XE Software affected versions not specified Cisco IOS XR Software affected versions not specified Description: A vulnerability in the Two-Way Active Measurement Protocol TWAMP serve...

PT-2025-20055 · Samsung · Bixby Vision

Name of the Vulnerable Software and Affected Versions: Bixby Vision versions prior to 3.8.1 in Android 13 Bixby Vision versions prior to 3.8.3 in Android 14 Bixby Vision versions prior to 3.8.21 in Android 15 Description: The issue is related to improper access control in Bixby Vision, allowing...

PT-2025-20199 · Unknown · Fernando Briano List Category Posts

Name of the Vulnerable Software and Affected Versions: Fernando Briano List category posts versions 0.90.3 and earlier Description: The issue is a Path Traversal vulnerability that allows PHP Local File Inclusion. This vulnerability enables an attacker to access and potentially execute local file...

PT-2025-20122 · Unknown · Themepoints Logo Showcase

Name of the Vulnerable Software and Affected Versions: themepoints Logo Showcase versions 3.0.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacker...

PT-2025-20114 · Unknown · Bold Page Builder

Name of the Vulnerable Software and Affected Versions: Bold Page Builder versions through 5.3.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows DOM-Based XSS. This enables potential attackers to...

PT-2025-20102 · Unknown · Envo Extra

Name of the Vulnerable Software and Affected Versions: Envo Extra versions 1.9.9 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Envo Extra versions 1.9.9 an...

PT-2025-20063 · Penup · Penup

Name of the Vulnerable Software and Affected Versions: PENUP versions prior to 3.9.19.32 Description: The issue is related to improper access control, allowing local attackers to access files with PENUP privilege. Recommendations: For versions prior to 3.9.19.32, update to version 3.9.19.32 or...

PT-2025-20110 · Unknown · Iulia Cazan Easy Replace Image

Name of the Vulnerable Software and Affected Versions: Iulia Cazan Easy Replace Image versions prior to 3.5.0 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. Recommendations: For versions prior to 3.5.0, update t...

PT-2025-20097 · WordPress · Rustaurius Ultimate Wp Mail

Name of the Vulnerable Software and Affected Versions: Rustaurius Ultimate WP Mail versions 1.3.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For Rustaurius...

PT-2025-20058 · Samsung +1 · Secure Folder +2

Name of the Vulnerable Software and Affected Versions: Secure Folder versions prior to 1.8.12.0 in Android 13 Secure Folder versions prior to 1.9.21.00 in Android 14 Description: The issue is related to improper authentication in Secure Folder, allowing physical attackers to reset the lock type...

PT-2025-20155 · Elementor · Simple Calendar For Elementor

Name of the Vulnerable Software and Affected Versions: Simple calendar for Elementor versions 1.6.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. Recommendations: For versions 1.6.5 and earlier, update to a...

PT-2025-20092 · Unknown · Xpeedstudio Wp Fundraising Donation/Crowdfunding Platform

Name of the Vulnerable Software and Affected Versions: XpeedStudio WP Fundraising Donation and Crowdfunding Platform versions 1.7.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For XpeedStudio WP...

PT-2025-20047 · Samsung · Spengesture Service

Name of the Vulnerable Software and Affected Versions: SpenGesture service versions prior to SMR May-2025 Release 1 Description: The issue is related to the improper handling of insufficient permission in the SpenGesture service, allowing local attackers to track the S Pen position...

PT-2025-20214 · WordPress · Thimpress Wp Pipes

Name of the Vulnerable Software and Affected Versions: ThimPress WP Pipes versions 1.4.2 and earlier Description: The issue is a Server-Side Request Forgery SSRF vulnerability, which allows an attacker to perform unauthorized actions on the server. This can lead to various security issues,...