PT-2025-21959 · Unknown · Shortlinks By Pretty Links

Name of the Vulnerable Software and Affected Versions: Shortlinks by Pretty Links versions 3.6.15 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For versio...

PT-2025-21970 · Unknown · Jetmonsters Mega Menu Block

Name of the Vulnerable Software and Affected Versions: jetmonsters Mega Menu Block versions 1.0.0 through 1.0.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacke...

PT-2025-22033 · WordPress · Car Park Booking System

Name of the Vulnerable Software and Affected Versions: Car Park Booking System for WordPress versions n/a through 2.6 Description: The issue is related to a Missing Authorization vulnerability in the Car Park Booking System for WordPress. Recommendations: For versions n/a through 2.6, update to a...

PT-2025-21993 · Woocommerce · Redefiningtheweb Dynamic Pricing & Discounts Lite

Name of the Vulnerable Software and Affected Versions: RedefiningTheWeb Dynamic Pricing & Discounts Lite for WooCommerce versions through 2.0.3 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions. Recommendations: For versions through 2.0.3,...

PT-2025-21968 · Unknown · Xylus Themes Import Social Events

Name of the Vulnerable Software and Affected Versions: Xylus Themes Import Social Events versions 1.8.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

PT-2025-22035 · WordPress · Bimber

Name of the Vulnerable Software and Affected Versions: Bimber - Viral Magazine WordPress Theme versions n/a through 9.2.5 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion'. This allows for...

PT-2025-22089 · Chimpstudio · Chimpstudio Foodbakery

Name of the Vulnerable Software and Affected Versions: Chimpstudio FoodBakery versions n/a through 3.3 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions n/a through 3.3, update to a version that fixes the...

PT-2025-21977 · Woocommerce · Active Products Tables For Woocommerce

Name of the Vulnerable Software and Affected Versions: Active Products Tables for WooCommerce versions 1.0.6.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that...

PT-2025-21946 · Unknown · Xpro Addons For Beaver Builder – Lite

Name of the Vulnerable Software and Affected Versions: Xpro Addons For Beaver Builder – Lite versions 1.5.5 and earlier Description: The issue affects the Xpro Addons For Beaver Builder – Lite, allowing Stored XSS due to improper neutralization of input during web page generation. Recommendations...

PT-2025-22060 · Unknown · Syndicate Out

Name of the Vulnerable Software and Affected Versions: Syndicate Out versions n/a through 0.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-22032 · Unknown · Ashok G Easy Child Theme Creator

Name of the Vulnerable Software and Affected Versions: Ashok G Easy Child Theme Creator versions 1.3.1 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. This can be exploited by tricking a user...

PT-2025-21952 · Unknown · Awcode Toolkit

Name of the Vulnerable Software and Affected Versions: AWcode Toolkit versions 1.0.18 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions 1.0.18 and earlier, update to a version that contains a fix for this...

PT-2025-21966 · Woocommerce · Change Woocommerce Add To Cart Button Text

Name of the Vulnerable Software and Affected Versions: Change Add to Cart Button Text for WooCommerce versions n/a through 2.2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

PT-2025-22008 · Tiki Time · Tiki Time

Name of the Vulnerable Software and Affected Versions: Tiki Time versions 1.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-22038 · Unknown · Lloyd Saunders Author Box After Posts

Name of the Vulnerable Software and Affected Versions: Lloyd Saunders Author Box After Posts versions 1.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

PT-2025-22050 · WordPress · Wp Vegas

Name of the Vulnerable Software and Affected Versions: WP Vegas versions n/a through 2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can inject malicious...

PT-2025-22039 · Unknown · Charly Leetham Enhanced Paypal Shortcodes

Name of the Vulnerable Software and Affected Versions: Charly Leetham Enhanced Paypal Shortcodes versions 0.5a and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

PT-2025-22025 · Woocommerce · Category Slider For Woocommerce

Name of the Vulnerable Software and Affected Versions: Product Category Slider for WooCommerce versions through 4.3.4 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion'. This allows for PHP...

PT-2025-22053 · Enituretechnology · Enituretechnology Ltl Freight Quotes – Freightquote Edition

Name of the Vulnerable Software and Affected Versions: Eniture Technology LTL Freight Quotes – FreightQuote Edition versions 2.3.11 and earlier Description: The issue affects the Eniture Technology LTL Freight Quotes – FreightQuote Edition due to a Missing Authorization vulnerability, allowing...

PT-2025-22075 · Mojoomla · Wpams

Name of the Vulnerable Software and Affected Versions: mojoomla WPAMS versions prior to 44.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...