PT-2025-14428 · Unknown · Vimal Kava Ai Search Bar

Name of the Vulnerable Software and Affected Versions: Vimal Kava AI Search Bar versions n/a through 1.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS in the AI Search Bar...

PT-2025-14036 · Unknown · Pesapal Gateway For Woocommerce

Name of the Vulnerable Software and Affected Versions: Pesapal Gateway for Woocommerce versions 2.1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

PT-2025-14045 · Houzez · Houzez Property Feed

Name of the Vulnerable Software and Affected Versions: Property Hive Houzez Property Feed versions n/a through 2.5.4 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows for Path Traversal in the Houzez...

PT-2025-14059 · WordPress · Wp Travel Engine

Name of the Vulnerable Software and Affected Versions: WP Travel Engine versions through 6.3.5 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion'. This allows PHP Local File Inclusion...

PT-2025-14401 · Unknown · Podpirate Access Areas

Name of the Vulnerable Software and Affected Versions: podpirate Access Areas versions n/a through 1.5.19 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables potential...

PT-2025-14221 · Openai · Openai Tools For Wordpress & Woocommerce

Name of the Vulnerable Software and Affected Versions: OpenAI Tools for WordPress & WooCommerce versions 2.1.5 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: Fo...

PT-2025-14248 · WordPress · Galaxy Weblinks Wp Clone Any Post Type

Name of the Vulnerable Software and Affected Versions: Galaxy Weblinks WP Clone any post type versions n/a through 3.4 Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, which allows phishing attacks. This vulnerability can be...

PT-2025-14455 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 135.0.7049.52 Description: The issue is related to an inappropriate implementation in Autofill, allowing a remote attacker to perform UI spoofing via a crafted HTML page if the user is convinced to engage in...

PT-2025-14057 · Unknown · G5Theme Essential Real Estate

Name of the Vulnerable Software and Affected Versions: g5theme Essential Real Estate versions n/a through 5.2.0 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File...

PT-2025-14130 · Unknown · Athemeart News

Name of the Vulnerable Software and Affected Versions: aThemeArt News, Magazine and Blog Elements versions n/a through 1.3 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacke...

PT-2025-14425 · WordPress · Wpfactory Advanced Woocommerce Product Sales Reporting

Name of the Vulnerable Software and Affected Versions: WPFactory Advanced WooCommerce Product Sales Reporting versions 3.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL...

PT-2025-14187 · Unknown · Gutena Kit – Gutenberg Blocks/Templates

Name of the Vulnerable Software and Affected Versions: Gutena Kit – Gutenberg Blocks and Templates versions n/a through 2.0.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

PT-2025-14137 · Unknown · Wpopal Opal Portfolio

Name of the Vulnerable Software and Affected Versions: wpopal Opal Portfolio versions 1.0.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

OPENSUSE-SU-2025:14948-1 MozillaFirefox-136.0.4-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-136.0.4-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-14354 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.14.0-rc4+ Description: A vulnerability in the Linux kernel has been resolved, which caused a kernel panic in the bnxt get queue statsrx | tx function. This issue occurred when the qstats-get operation was...

CVE-2025-24237

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, visionOS 2.4, watchOS 11.4. An app may be able to cause unexpected system termination...

CVE-2025-24209

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-24192

A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a website may leak sensitive data...

CVE-2025-24213

CVE-2025-24213 is a type-confusion vulnerability in WebKit-related components that can lead to memory corruption. Affected platforms include Apple OSes (macOS Sequoia 15.5, iOS 18.5 / iPadOS 18.5, tvOS 18.5, watchOS 11.5, visionOS 2.5, Safari 18.5) with fixation described as improved handling of ...

CVE-2025-24213

This issue was addressed with improved handling of floats. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. A type confusion issue could lead to memory corruption...