PT-2025-22708 · Goodlayers · Goodlayers Hostel

Name of the Vulnerable Software and Affected Versions: Goodlayers Hostel versions n/a through 3.1.2 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection' vulnerability, which allows Blind SQL Injection...

PT-2025-22761 · Unknown · Khaled User Meta

Name of the Vulnerable Software and Affected Versions: Khaled User Meta versions n/a through 3.1.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions n/a throug...

PT-2025-22681 · WordPress · Gavias Kiamo - Responsive Business Service Wordpress Theme

Name of the Vulnerable Software and Affected Versions: gavias Kiamo - Responsive Business Service WordPress Theme versions 1.3.3 and earlier Description: The issue affects the gavias Kiamo - Responsive Business Service WordPress Theme, allowing for PHP Local File Inclusion due to improper control...

PT-2025-22697 · Unknown · Gavias Winnex

Name of the Vulnerable Software and Affected Versions: gavias Winnex versions 1.3.2 and earlier Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

PT-2025-22758 · Unknown · Mojoomla School Management

Name of the Vulnerable Software and Affected Versions: mojoomla School Management versions n/a through 92.0.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-22755 · Wpfunnels · Wpfunnels Mail Mint

Name of the Vulnerable Software and Affected Versions: WPFunnels Mail Mint versions 1.17.7 and earlier Description: The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendations: For WPFunnels Mail Mint versions 1.17.7 and...

PT-2025-22823 · Strangebee · Thehive

Name of the Vulnerable Software and Affected Versions: StrangeBee TheHive versions 5.2.0 through 5.2.15 StrangeBee TheHive versions 5.3.0 through 5.3.10 StrangeBee TheHive versions 5.4.0 through 5.4.9 StrangeBee TheHive versions 5.5.0 Description: A Cross-Site Request Forgery CSRF issue allows a...

PT-2025-22673 · Unknown · Apustheme Capie

Name of the Vulnerable Software and Affected Versions: ApusTheme Capie versions 1.0.0 through 1.0.40 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

PT-2025-22723 · Unknown · Reifsnyderb Document Management System

Name of the Vulnerable Software and Affected Versions: reifsnyderb Document Management System versions 1.24 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means that an...

PT-2025-22746 · Woocommerce · Subaccounts For Woocommerce

Name of the Vulnerable Software and Affected Versions: Subaccounts for WooCommerce versions 1.6.6 and earlier Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel, allowing Authentication Abuse. Recommendations: For Subaccounts for WooCommerce versions...

PT-2025-22762 · Unknown · Mojoomla School Management

Name of the Vulnerable Software and Affected Versions: mojoomla School Management versions n/a through 92.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

PT-2025-22777 · Unknown · Arconix Shortcodes

Name of the Vulnerable Software and Affected Versions: Arconix Shortcodes versions 2.1.16 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

PT-2025-22709 · Goodlayers · Goodlayers Hostel

Name of the Vulnerable Software and Affected Versions: Goodlayers Hostel versions 3.1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For Goodlayers Hostel...

PT-2025-22706 · Boldthemes · Boldthemes Medicare

Name of the Vulnerable Software and Affected Versions: BoldThemes Medicare versions n/a through 2.1.0 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions n/a through 2.1.0, update to a version later than 2.1.0 to...

PT-2025-22719 · Unknown · Tayori Form

Name of the Vulnerable Software and Affected Versions: Tayori Form versions 1.2.9 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-22786 · Unknown · Dastan800 Visual Header

Name of the Vulnerable Software and Affected Versions: dastan800 Visual Header versions 1.3 and earlier Description: The issue is related to a Missing Authorization vulnerability that allows exploiting incorrectly configured access control security levels. Recommendations: For dastan800 Visual...

Adobe Animate NULL Pointer DoS

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to the handling of NULL pointers. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-22750 · Unknown · Infocob Crm Forms

Name of the Vulnerable Software and Affected Versions: Infocob CRM Forms versions n/a through 2.4.0 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows for Path Traversal in Infocob CRM Forms...

CVE-2022-42075

Wedding Planner v1.0 is vulnerable to arbitrary code execution...

CVE-2022-42878

Null pointer dereference for some IntelR Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially enable information disclosure via local access...