PT-2025-17055 · Unknown · Bjornw File Icons

Name of the Vulnerable Software and Affected Versions: BjornW File Icons versions n/a through 2.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to injec...

PT-2025-17045 · Unknown · Dhanendran Rajagopal Term Taxonomy Converter

Name of the Vulnerable Software and Affected Versions: Dhanendran Rajagopal Term Taxonomy Converter versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means...

PT-2025-17065 · Unknown · Radius Of Thought Page/Post Lister

Name of the Vulnerable Software and Affected Versions: Radius of Thought Page and Post Lister versions 1.2.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

PT-2025-17049 · Unknown · Theme File Duplicator

Name of the Vulnerable Software and Affected Versions: Theme File Duplicator versions 1.3 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the use of malicious files. Recommendations: For Theme File Duplicator versions 1.3 and earlier,...

PT-2025-17073 · Unknown · Graphems List Urls

Name of the Vulnerable Software and Affected Versions: graphems List Urls versions n/a through 0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS in graphems List Urls. Recommendation...

PT-2025-17051 · Unknown · Divspark Flagged Content

Name of the Vulnerable Software and Affected Versions: divspark Flagged Content versions 1.0.0 through 1.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attacke...

PT-2025-17075 · Deetronix · Deetronix Booking Ultra Pro

Name of the Vulnerable Software and Affected Versions: Deetronix Booking Ultra Pro versions 1.1.19 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

PT-2025-17123 · Unknown · Mapro Collins Coming Soon Countdown

Name of the Vulnerable Software and Affected Versions: Mapro Collins Coming Soon Countdown versions n/a through 2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

PT-2025-17131 · Unknown · Rameez Iqbal Real Estate Manager

Name of the Vulnerable Software and Affected Versions: Rameez Iqbal Real Estate Manager versions n/a through 7.3 Description: The issue is related to an Improper Control of Generation of Code, also known as 'Code Injection'. This allows for Code Injection in the Real Estate Manager...

PT-2025-17153

Name of the Vulnerable Software and Affected Versions PickPlugins Question Answer versions 1.2.70 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attacke...

PT-2025-17098 · Unknown · Zephyr Project Manager

Name of the Vulnerable Software and Affected Versions: Zephyr Project Manager versions n/a through 3.3.101 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This means an attacker can...

PT-2025-17107 · Unknown · Feedify – Web Push Notifications

Name of the Vulnerable Software and Affected Versions: Feedify – Web Push Notifications versions n/a through 2.4.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This means that ...

PT-2025-17094 · Jw Player · Ilghera Related Videos

Name of the Vulnerable Software and Affected Versions: ilGhera Related Videos for JW Player versions 1.2.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This means a...

PT-2025-16995 · Maros Pristas · Maros Pristas Gravity Forms Css Themes With Fontawesome/Placeholders

Name of the Vulnerable Software and Affected Versions: Maros Pristas Gravity Forms CSS Themes with Fontawesome and Placeholders versions n/a through 8.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing...

PT-2025-17135 · Buildium · Buildium

Name of the Vulnerable Software and Affected Versions: Listings for Buildium versions 0.1.4 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS. This means an attacker could potentially trick a user into performing unintende...

PT-2025-17151 · Weptile · Weptile Shopapper

Name of the Vulnerable Software and Affected Versions: weptile ShopApper versions 0.4.39 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an attacker can...

PT-2025-17161 · Unknown · Wpwax Helpgent

Name of the Vulnerable Software and Affected Versions: wpWax HelpGent versions n/a through 2.2.4 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions n/a through 2.2.4, update to a version later than 2.2.4 to resolve...

PT-2025-17207 · Unknown · Litepubl Cms

Name of the Vulnerable Software and Affected Versions: Litepubl CMS versions 7.0.9 and earlier Description: The issue allows for remote code execution RCE in the admin/service/run endpoint. No information is provided about the estimated number of potentially affected devices worldwide or real-wor...

PT-2025-17206 · Ibm · Ibm I

Name of the Vulnerable Software and Affected Versions: IBM i version 7.6 Description: The issue is related to a privilege escalation due to incorrect profile swapping in an OS command, allowing a malicious actor to gain root access to the host operating system. Recommendations: For IBM i version...

PT-2025-17085 · Silvasoft · Silvasoft Boekhouden

Name of the Vulnerable Software and Affected Versions: Silvasoft boekhouden versions n/a through 3.0.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This means an attacker can...