PT-2025-16616 · Unknown · Ever Accounting

Name of the Vulnerable Software and Affected Versions: Ever Accounting versions n/a through 2.1.5 Description: A Cross-Site Request Forgery CSRF issue affects Ever Accounting, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions n/a through 2.1.5, updat...

PT-2025-16603 · Wpcasa · Wpcasa

Name of the Vulnerable Software and Affected Versions: WPCasa versions through 1.3.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. Recommendations: For versions through 1.3.2, update t...

PT-2025-16619 · Listdom · Listdom

Name of the Vulnerable Software and Affected Versions: Listdom versions n/a through 4.0.0 Description: The issue is related to a URL Redirection to Untrusted Site 'Open Redirect' vulnerability, which allows phishing. This vulnerability can be exploited to redirect users to untrusted sites,...

PT-2025-16622 · Unknown · Woocommerce Product Table Lite

Name of the Vulnerable Software and Affected Versions: WooCommerce Product Table Lite versions 3.9.5 and earlier Description: The issue is related to a Missing Authorization vulnerability in WC Product Table, which allows exploiting incorrectly configured access control security levels...

PT-2025-16517 · WordPress · Wp Delete User Accounts

Name of the Vulnerable Software and Affected Versions: WP Delete User Accounts versions 1.2.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This enables potential attackers to...

PT-2025-16408 · Oracle +1 · Mysql Server

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.4.0 through 9.0.0 Description: The issue allows a high-privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in the unauthorized ability to cause a han...

PT-2025-16526 · Unknown · Fetch Designs Sign-Up Sheets

Name of the Vulnerable Software and Affected Versions: Fetch Designs Sign-up Sheets versions prior to 2.3.0.1 Description: The issue is related to improper control of code generation, allowing code injection. This problem enables the injection of code, potentially leading to unauthorized access o...

PT-2025-16313 · WordPress · Advance Wp Query Search Filter

Name of the Vulnerable Software and Affected Versions: Advance WP Query Search Filter versions 1.0.10 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS in the Advance WP Query...

PT-2025-16405

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.0 through 8.0.41 MySQL Server versions 8.4.0 through 8.4.4 MySQL Server versions 9.0.0 through 9.2.0 Description A vulnerability in the MySQL Server product allows a high-privileged attacker with network access via...

PT-2025-16430

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.0 through 8.0.41 MySQL Server versions 8.4.0 through 8.4.4 MySQL Server versions 9.0.0 through 9.2.0 Description A vulnerability in the MySQL Server product allows a high-privileged attacker with network access via...

PT-2025-16518 · Unknown · Gurmehub Kargo Entegratör

Name of the Vulnerable Software and Affected Versions: Gurmehub Kargo Entegratör versions 1.1.14 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-16352 · Mozilla +10 · Thunderbird +10

Name of the Vulnerable Software and Affected Versions: Thunderbird versions prior to 137.0.2 Thunderbird versions prior to 128.9.2 Description: The issue arises from Thunderbird's handling of the X-Mozilla-External-Attachment-URL header, which allows for external attachments. When an email is...

PT-2025-16328 · Unknown · Epc Photography

Name of the Vulnerable Software and Affected Versions: EPC Photography versions through 7.5.2 Description: The issue is a Server-Side Request Forgery SSRF vulnerability. This means an attacker could potentially force the server to make unintended requests, potentially leading to unauthorized acce...

PT-2025-16288 · Dell · Dell Trusted Device

Name of the Vulnerable Software and Affected Versions: Dell Trusted Device versions prior to 7.0.3.0 Description: Dell Trusted Device, versions prior to 7.0.3.0, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this...

PT-2025-16419

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.0 through 8.0.41 MySQL Server versions 8.4.0 through 8.4.4 MySQL Server versions 9.0.0 through 9.2.0 Description The issue allows a high-privileged attacker with network access via multiple protocols to compromise MyS...

PT-2025-16511 · Unknown · Advanced Custom Fields Pro

Name of the Vulnerable Software and Affected Versions: NotFound Advanced Custom Fields: Link Picker Field versions 1.2.8 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS. This enables...

PT-2025-16513 · Wpfactory · Wpfactory Additional Custom Product Tabs For Woocommerce

Name of the Vulnerable Software and Affected Versions: WPFactory Additional Custom Product Tabs for WooCommerce versions 1.7.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means...

PT-2025-16316 · Unknown · Hockeydata Los

Name of the Vulnerable Software and Affected Versions: hockeydata LOS versions 1.2.4 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...

PT-2025-16525 · Unknown · Notfound Jetmenu

Name of the Vulnerable Software and Affected Versions: NotFound JetMenu versions n/d through 2.4.9 Description: The issue is related to a lack of authorization in NotFound JetMenu, allowing access to functionalities not properly constrained by Access Control Lists ACLs. Recommendations: For...

PT-2025-16322 · Jetblog · Jetblog

Name of the Vulnerable Software and Affected Versions: JetBlog versions n/a through 2.4.3 Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For JetBlog versions n/a through 2.4.3,...