PT-2025-15753 · Unknown · Newsboard Post/Rss Scroller

Name of the Vulnerable Software and Affected Versions: NewsBoard Post and RSS Scroller versions 1.2.12 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in the NewsBoard Plugin. Recommendations: For NewsBoard Post and RSS Scroller version...

PT-2025-15795 · Unknown · Debounce Email Validator

Name of the Vulnerable Software and Affected Versions: DeBounce Email Validator versions n/a through 5.7.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject...

PT-2025-15751 · Icyleaf · Icyleaf Ws Audio Player

Name of the Vulnerable Software and Affected Versions: icyleaf WS Audio Player versions 1.1.8 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions 1.1.8 and earlier, update to a version that fixes th...

PT-2025-15805 · WordPress · Vsourz Digital Wp Map Route Planner

Name of the Vulnerable Software and Affected Versions: Vsourz Digital WP Map Route Planner versions 1.0.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For Vsourz Digital WP Map Route Planner versio...

Convert Forms, 4.4.10, XSS (Cross Site Scripting)

New 5.0 Update details: All XSS and SQL reported issues have been fixed in the latest release 5.0 Update URL: https://www.tassos.gr/releases/convert-forms/convert-forms-5-0-0 Changelog URL: https://www.tassos.gr/releases/convert-forms/convert-forms-5-0-0...

PT-2025-15731 · Woocommerce · Pagopar – Woocommerce Gateway

Name of the Vulnerable Software and Affected Versions: Pagopar - Grupo M S.A. Pagopar – WooCommerce Gateway versions through 2.7.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability and Stored XSS in Pagopar – WooCommerce Gateway. Recommendations: For versions...

PT-2025-15723 · Unknown · Uzair Easyfonts

Name of the Vulnerable Software and Affected Versions: Uzair Easyfonts versions 1.1.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions 1.1.2 and earlie...

PT-2025-15735 · Wpsolr · Wpsolr

Name of the Vulnerable Software and Affected Versions: WPSolr versions n/a through 24.0 Description: A Cross-Site Request Forgery CSRF issue allows Privilege Escalation. This is a type of attack where an attacker tricks a user into performing unintended actions on a web application that the user ...

PT-2025-15785 · Unknown · Hivedigital Canonical Attachments

Name of the Vulnerable Software and Affected Versions: hivedigital Canonical Attachments versions n/a through 1.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

PT-2025-15708 · Shopware · Shopware

Name of the Vulnerable Software and Affected Versions: Shopware versions prior to 6.6.10.3 Shopware versions prior to 6.5.8.17 Description: The issue concerns the default settings for double-opt-in in Shopware, which allows for mass unsolicited newsletter sign-ups without confirmation...

PT-2025-15694 · Progress · Sitefinity

Name of the Vulnerable Software and Affected Versions: Sitefinity versions 14.0 through 14.3 Sitefinity versions 14.4 before 14.4.8145 Sitefinity versions 15.0 before 15.0.8231 Sitefinity versions 15.1 before 15.1.8332 Sitefinity versions 15.2 before 15.2.8429 Description: The issue is related to...

PT-2025-15854 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 21.2R3-S9 Junos OS versions from 21.4 before 21.4R3-S10 Junos OS versions from 22.2 before 22.2R3-S6 Junos OS versions from 22.4 before 22.4R3-S6 Junos OS versions from 23.2 before 23.2R2-S3 Junos OS versions from...

PT-2025-15784 · Unknown · Hossainawlad Ald Login Page

Name of the Vulnerable Software and Affected Versions: hossainawlad ALD Login Page versions n/a through 1.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS in the hossainawlad ALD Login Page. Recommendations: For versions n/a throug...

PT-2025-15727 · Unknown · Nav Menu Manager

Name of the Vulnerable Software and Affected Versions: Nav Menu Manager versions 3.2.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-15976 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 13.12 through 17.8.6 GitLab CE/EE versions 17.9 through 17.9.5 GitLab CE/EE versions 17.10 through 17.10.3 Description: An issue has been discovered affecting GitLab CE/EE, where under certain conditions, users could...

PT-2025-15775 · Unknown · Ultra Demo Importer

Name of the Vulnerable Software and Affected Versions: Ultra Demo Importer versions 1.0.5 and earlier Description: A Cross-Site Request Forgery CSRF issue allows attackers to upload a web shell to a web server. This enables potential cyber threats, including server compromise. Recommendations: Fo...

PT-2025-15851 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 21.4R3-S9 Junos OS versions 22.2 prior to 22.2R3-S5 Junos OS versions 22.4 prior to 22.4R3-S4 Junos OS versions 23.2 prior to 23.2R2-S3 Junos OS versions 23.4 prior to 23.4R2-S3 Junos OS versions 24.2 prior to...

PT-2025-15864 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 21.2R3-S9 Junos OS versions 21.4 prior to 21.4R3-S10 Junos OS versions 22.2 prior to 22.2R3-S6 Junos OS versions 22.4 prior to 22.4R3 Junos OS versions 23.2 prior to 23.2R1-S2, 23.2R2 Description: An issue in the...

PT-2025-15829 · Unknown · Powerpress Podcasting

Name of the Vulnerable Software and Affected Versions: PowerPress Podcasting versions through 11.12.4 Description: The issue is a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. Recommendations: For versions through 11.12.4, update to a version later...

PT-2025-15862 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 21.2R3-S9 Junos OS versions from 21.4 before 21.4R3-S8 Junos OS versions from 22.2 before 22.2R3-S6 Junos OS versions from 22.4 before 22.4R3-S2 Junos OS versions from 23.2 before 23.2R2-S3 Junos OS versions from 23...