PT-2025-24228 · Unknown · Crawlomatic Multipage Scraper Post Generator

Name of the Vulnerable Software and Affected Versions: Crawlomatic Multisite Scraper Post Generator versions 2.6.8.2 and earlier Description: The issue allows for the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendations: For versions...

PT-2025-24054 · Apache · Apache

Name of the Vulnerable Software and Affected Versions: Apache versions prior to the fixed version Description: A missing protection against path traversal allows access to any file on the server. This issue affects the Apache software, allowing unauthorized access to files. Recommendations: For...

PT-2025-24120 · WordPress · Seerox Wp Media File Type Manager

Name of the Vulnerable Software and Affected Versions: Seerox WP Media File Type Manager versions 2.3.0 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For Seerox WP Media Fi...

PT-2025-24187 · Unknown · Elite Video Player

Name of the Vulnerable Software and Affected Versions: Elite Video Player versions 10.0.5 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Elite Video Player, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For Elite Video Player...

PT-2025-24229 · Unknown · Bastien Ho Event Post

Name of the Vulnerable Software and Affected Versions: Bastien Ho Event post versions n/a through 5.10.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in the Event post...

PT-2025-24121 · WordPress · Wp Corner Quick Event Calendar

Name of the Vulnerable Software and Affected Versions: WP Corner Quick Event Calendar versions 1.4.9 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For WP Corner...

PT-2025-24198 · Unknown · Rtmkit Addons For Elementor

Name of the Vulnerable Software and Affected Versions: RTMKit Addons for Elementor versions 1.6.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...

PT-2025-24080 · Idf +1 · Idf +1

Name of the Vulnerable Software and Affected Versions: IDF versions 0.10.0-0C03-03 ZLF versions 0.10.0-0C03-04 Description: This issue allows an attacker to store malicious payload in software that will run in the victim's browser. Exploiting this requires authenticating to the device and executi...

PT-2025-24078 · WordPress · Wp Posts Carousel

Name of the Vulnerable Software and Affected Versions: WP Posts Carousel versions 1.3.12 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in WP Posts Carousel. Recommendations: For WP Posts Carousel versions 1.3.12 and earlier, upda...

PT-2025-24114 · Unknown · Cmsminds Pay With Contact Form 7

Name of the Vulnerable Software and Affected Versions: cmsMinds Pay with Contact Form 7 versions 1.0.0 through 1.0.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack...

PT-2025-24214 · Unknown · Anton Vanyukov Market Exporter

Name of the Vulnerable Software and Affected Versions: Anton Vanyukov Market Exporter versions n/a through 2.0.22 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions n/a through 2.0.22, update to a versi...

PT-2025-24086 · Stylemixthemes · Motors - Events

Name of the Vulnerable Software and Affected Versions: StylemixThemes Motors - Events versions 1.4.7 and earlier Description: The issue affects the Motors - Events plugin, allowing PHP Local File Inclusion due to improper control of filename for include/require statement in PHP program, also know...

PT-2025-24237 · Unknown · Ht Team Member

Name of the Vulnerable Software and Affected Versions: HT Team Member versions 1.1.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-24126 · Unknown · Bg Orthodox Calendar

Name of the Vulnerable Software and Affected Versions: Bg Orthodox Calendar versions 0.13.10 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web applicatio...

PT-2025-24134 · Unknown · Arildur Read More Login

Name of the Vulnerable Software and Affected Versions: arildur Read More Login versions n/a through 2.0.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to...

PT-2025-24171 · Unknown · Giraphix Creative Layouts For Elementor

Name of the Vulnerable Software and Affected Versions: Giraphix Creative Layouts for Elementor versions 1.11 and earlier Description: A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed on behalf of a user. This can lead to various security problems, including data...

PT-2025-24139 · Unknown · Mva7 The Holiday Calendar

Name of the Vulnerable Software and Affected Versions: mva7 The Holiday Calendar versions n/a through 1.18.2.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in mva7 The Holiday...

PT-2025-24207 · Unknown · Vova Shortcodes Ultimate

Name of the Vulnerable Software and Affected Versions: Vova Shortcodes Ultimate versions 7.3.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject...

PT-2025-24250 · Gamipress · Gamipress

Name of the Vulnerable Software and Affected Versions: GamiPress versions n/a through 7.4.5 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...

PT-2025-24073 · Themehigh · Themehigh Dynamic Pricing/Discount Rules

Name of the Vulnerable Software and Affected Versions: ThemeHigh Dynamic Pricing and Discount Rules versions 2.2.9 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed. This can lead to security breaches where an...