PT-2025-26351 · Joe Hoyle · Wpthumb

Name of the Vulnerable Software and Affected Versions: Joe Hoyle WPThumb versions 0.10 and earlier Description: A Server-Side Request Forgery SSRF issue affects Joe Hoyle WPThumb, allowing for Server Side Request Forgery. Recommendations: For Joe Hoyle WPThumb versions 0.10 and earlier, update to...

PT-2025-26333 · Oganro · Oganro Pixelbeds Channel Manager/Hotel Booking Engine

Name of the Vulnerable Software and Affected Versions: Oganro PixelBeds Channel Manager and Hotel Booking Engine versions 1.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For Oganro PixelBeds Chann...

PT-2025-26345 · WordPress · Wp Inventory Manager

Name of the Vulnerable Software and Affected Versions: WP Inventory Manager versions prior to 2.3.4 Description: A Cross-Site Request Forgery CSRF issue affects the WP Inventory Manager, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions prior to 2.3....

PT-2025-26317 · Coros · Coros Pace 3

Name of the Vulnerable Software and Affected Versions: COROS PACE 3 versions through 3.0808.0 Description: An out-of-bounds read vulnerability exists in COROS PACE 3. Sending a crafted Bluetooth Low Energy BLE message forces the device to reboot. Recommendations: Update COROS PACE 3 to a version...

PT-2025-26369 · Unknown · Fridaysystems Inventory Presser

Name of the Vulnerable Software and Affected Versions: fridaysystems Inventory Presser versions through 15.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...

PT-2025-26452 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 7.10 through 16.11.5 GitLab CE/EE version 17.0 through 17.0.3 GitLab CE/EE version 17.1 through 17.1.1 Description: A Denial of Service DoS condition exists in GitLab CE/EE. An attacker can cause a denial of service by...

PT-2025-26324

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.11.x through 9.11.15 Mattermost versions 10.5.x through 10.5.5 Mattermost versions 10.6.x through 10.6.5 Mattermost versions 10.7.x through 10.7.2 Mattermost versions 10.8.x through 10.8.0 Description: The issue is relat...

PT-2025-26502 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6 Description: The issue is caused by insufficient validation of incoming request resources, which could allow a remote attacker to cause a denial of service. Recommendations:...

PT-2025-26373 · Unknown · Ip Based Login

Name of the Vulnerable Software and Affected Versions: brijeshk89 IP Based Login versions n/a through 2.4.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker ca...

PT-2025-26413 · Unknown · Beee Tinynav

Name of the Vulnerable Software and Affected Versions: Beee TinyNav versions n/a through 1.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For Beee TinyNav versions n/a through 1.4, update to a version that fixes this issue. At...

PT-2025-26414 · Unknown · King Rayhan Scroll Up

Name of the Vulnerable Software and Affected Versions: King Rayhan Scroll UP versions n/a through 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables potential attackers ...

PT-2025-26421 · Unknown · Esselink.Nu Settings

Name of the Vulnerable Software and Affected Versions: Esselink.nu Settings versions n/a through 2.94 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that also allows Reflected XSS in Esselink.nu Settings. Recommendations: For Esselink.nu Settings versions n/a through...

PT-2025-26393 · WordPress · Wp Register Profile With Shortcode

Name of the Vulnerable Software and Affected Versions: WP Register Profile With Shortcode versions 3.6.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in WP Register...

PT-2025-26396 · Woocommerce · Related Products Manager For Woocommerce

Name of the Vulnerable Software and Affected Versions: Related Products Manager for WooCommerce versions 1.6.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means...

PT-2025-26388 · Unknown · Fyrebox Quizzes

Name of the Vulnerable Software and Affected Versions: Fyrebox Quizzes versions n/a through 3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-26398 · Sitekit · Sitekit

Name of the Vulnerable Software and Affected Versions: Sitekit versions n/a through 1.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to inject malicious...

PT-2025-26408 · Radiustheme · Radiustheme Classified Listing

Name of the Vulnerable Software and Affected Versions: RadiusTheme Classified Listing versions n/a through 4.2.0 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows...

PT-2025-26390 · Unknown · Buying Buddy Idx Crm

Name of the Vulnerable Software and Affected Versions: Buying Buddy IDX CRM versions through 2.3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This enables potential attackers to...

PT-2025-26391 · Unknown · Anant Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Anant Addons for Elementor versions 1.2.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: F...

PT-2025-26392 · Unknown · Gutenberg Blocks – Acf Blocks Suite

Name of the Vulnerable Software and Affected Versions: Gutenberg Blocks – ACF Blocks Suite versions through 2.6.11 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...