12715 matches found
PT-2025-24053 · Apache · Apache Server
Name of the Vulnerable Software and Affected Versions: Apache Server versions prior to the fixed version Description: An improper neutralization of inputs used in expression language allows remote code execution with the highest privileges on the server. This issue affects the Apache Server,...
PT-2025-24131 · Woocommerce · Subscription Renewal Reminders For Woocommerce
Name of the Vulnerable Software and Affected Versions: Subscription Renewal Reminders for WooCommerce versions 1.3.7 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This means an attacker can trick a user into...
PT-2025-24263 · WordPress · Vuong Nguyen Wp Security Master
Name of the Vulnerable Software and Affected Versions: Vuong Nguyen WP Security Master versions 1.0.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For Vuong...
PT-2025-24303 · Synology · File Station
Name of the Vulnerable Software and Affected Versions: File Station 5 versions prior to 5.5.6.4791 Description: An improper certificate validation issue has been reported, potentially allowing remote attackers with user access to compromise system security. Recommendations: For versions prior to...
PT-2025-24296 · Synology · File Station
Name of the Vulnerable Software and Affected Versions: File Station 5 versions prior to 5.5.6.4847 Description: A NULL pointer dereference issue allows a remote attacker with a user account to launch a denial-of-service DoS attack. Recommendations: For versions prior to 5.5.6.4847, update to...
PT-2025-24226 · Cozmoslabs · Cozmoslabs Profile Builder
Name of the Vulnerable Software and Affected Versions: Cozmoslabs Profile Builder versions 3.13.8 and earlier Description: The issue is related to improper validation of specified quantity in input, which allows phishing. Recommendations: For Cozmoslabs Profile Builder versions 3.13.8 and earlier...
PT-2025-24090 · Nasa Core · Nasa Core
Name of the Vulnerable Software and Affected Versions: Nasa Core versions prior to 6.4.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can inject malicious...
PT-2025-24140 · Weblizar · Weblizar Hr Management Lite
Name of the Vulnerable Software and Affected Versions: weblizar HR Management Lite versions prior to 3.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions prior to...
PT-2025-24098 · Ancorathemes · Ancorathemes Mr. Murphy
Name of the Vulnerable Software and Affected Versions: AncoraThemes Mr. Murphy versions prior to 1.2.12.1 Description: The issue is related to Deserialization of Untrusted Data, allowing Object Injection. This can be exploited due to the deserialization of untrusted data, which enables an attacke...
PT-2025-24248 · Pickplugins · Pickplugins Job Board Manager
Name of the Vulnerable Software and Affected Versions: PickPlugins Job Board Manager versions 2.1.60 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...
PT-2025-24154 · Deetronix · Deetronix Booking Ultra Pro
Name of the Vulnerable Software and Affected Versions: Deetronix Booking Ultra Pro versions 1.1.20 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...
PT-2025-24215 · Mario Peshev · Wp-Crm System
Name of the Vulnerable Software and Affected Versions: Mario Peshev WP-CRM System versions 3.4.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by Access Control Lists ACLs. This means that...
PT-2025-24269 · WordPress · Wp Map Plugins Interactive Regional Map Of Africa
Name of the Vulnerable Software and Affected Versions: WP Map Plugins Interactive Regional Map of Africa versions 1.0 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Interactive Regional Map of Africa, allowing unauthorized actions to be performed on behalf of a user...
PT-2025-24111 · Unknown · Whassan Ki Live Video Conferences
Name of the Vulnerable Software and Affected Versions: whassan KI Live Video Conferences versions 5.5.15 and earlier Description: The issue is related to a Missing Authorization vulnerability that allows exploiting incorrectly configured access control security levels. This can be exploited in...
PT-2025-24203 · Unknown · Nk Docspress
Name of the Vulnerable Software and Affected Versions: nK DocsPress versions through 2.5.2 Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For versions through 2.5.2,...
PT-2025-24185 · Unknown · Alessandro Piconi Simple Keyword To Link
Name of the Vulnerable Software and Affected Versions: Alessandro Piconi Simple Keyword to Link versions 1.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attac...
PT-2025-24153 · Ability · Accessibility Suite
Name of the Vulnerable Software and Affected Versions: Ability, Inc Accessibility Suite versions through 4.19 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Ability, In...
PT-2025-24293 · Qnap · Qsync Central
Name of the Vulnerable Software and Affected Versions: Qsync Central versions prior to 4.5.0.6 Description: A use of externally-controlled format string vulnerability has been reported. If exploited, the vulnerability could allow remote attackers who have gained user access to obtain secret data ...
