OPENSUSE-SU-2025:15105-1 python311-suds-1.2.0-2.4 on GA media

These are all security issues fixed in the python311-suds-1.2.0-2.4 package on the GA media of openSUSE Tumbleweed...

RHSA-2025:7691 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

RHSA-2025:7689 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

RHSA-2025:7672 Red Hat Security Advisory: xdg-utils security update

Bulletin has no description...

PT-2025-21680 · WordPress · Css3 Accordions

Name of the Vulnerable Software and Affected Versions: CSS3 Accordions for WordPress versions 3.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

PT-2025-21696

Name of the Vulnerable Software and Affected Versions: imithemes Eventer versions 3.9.6 and earlier Description: The issue is related to an SQL Injection vulnerability, specifically Improper Neutralization of Special Elements used in an SQL Command, which allows Blind SQL Injection...

PT-2025-21656 · Nextcloud · Nextcloud Enterprise Server +1

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 29.0.15, 30.0.9, and 31.0.3 Nextcloud Enterprise Server versions prior to 26.0.13.15, 27.1.11.15, 28.0.14.6, 29.0.15, 30.0.9, and 31.0.3 Description: The issue concerns a bug in session handling. When the...

PT-2025-21698 · Whmpress · Whmpress

Name of the Vulnerable Software and Affected Versions: WHMpress versions 6.2 through revision Description: The issue is a Path Traversal vulnerability in WHMpress, which allows Path Traversal. Recommendations: For versions 6.2 through revision, update to a version that fixes this issue. At the...

PT-2025-21678 · WordPress · Pixel Wordpress Form Builderplugin & Autoresponder

Name of the Vulnerable Software and Affected Versions: Pixel WordPress Form BuilderPlugin & Autoresponder versions 1.0.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For Pixel WordPress Form...

PT-2025-21731 · Shapedplugin Llc · Wp Tabs

Name of the Vulnerable Software and Affected Versions: ShapedPlugin LLC WP Tabs versions 2.2.11 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions 2.2.11 and earlier, update to a version that contains a...

PT-2025-21617 · Hitachi · Hitachi Ops Center Analyzer

Name of the Vulnerable Software and Affected Versions: Hitachi Ops Center Analyzer versions 10.8.0-00 through 11.0.4-00 Hitachi Ops Center Analyzer versions 10.9.0-00 through 11.0.4-00 Description: The issue is related to a Cross-Site WebSocket Hijacking problem in the RAID Agent component of...

PT-2025-21669 · Unknown · Themeton Rozario

Name of the Vulnerable Software and Affected Versions: themeton Rozario versions prior to 1.4 Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For themeton Rozario...

PT-2025-21674 · Lambertgroup · Lambertgroup Shout

Name of the Vulnerable Software and Affected Versions: LambertGroup SHOUT versions n/a through 3.5.3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendation...

PT-2025-21711 · Unknown · Villatheme Curcy

Name of the Vulnerable Software and Affected Versions: villatheme CURCY versions 2.3.7 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 2.3.7 and earlier,...

PT-2025-21689 · Unknown · Simple Link Directory

Name of the Vulnerable Software and Affected Versions: Simple Link Directory Pro versions through 14.7.3 Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For version...

PT-2025-21737 · Lupsonline · Seo Flow

Name of the Vulnerable Software and Affected Versions: SEO Flow by LupsOnline versions n/a through 2.2.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web applicatio...

PT-2025-21661 · Nextcloud +1 · Nextcloud Enterprise Server +3

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 30.0.2 Nextcloud Server versions prior to 29.0.9 Nextcloud Server versions prior to 28.0.1 Nextcloud Enterprise Server versions prior to 30.0.2 Nextcloud Enterprise Server versions prior to 29.0.9 Nextcloud...

PT-2025-21683 · Unknown · Lambertgroup Multimedia Responsive Carousel With Image Video Audio Support

Name of the Vulnerable Software and Affected Versions: LambertGroup Multimedia Responsive Carousel with Image Video Audio Support versions through 2.6.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command...

PT-2025-21723 · Woocommerce · Kilbot Woocommerce Pos

Name of the Vulnerable Software and Affected Versions: kilbot WooCommerce POS versions 1.7.8 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For kilbot WooCommer...

PT-2025-21687 · Lambertgroup · Lambertgroup Sticky Html5 Music Player

Name of the Vulnerable Software and Affected Versions: LambertGroup Sticky HTML5 Music Player versions 3.1.6 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...