PT-2025-15847 · Brizy Pro · Brizy Pro

Name of the Vulnerable Software and Affected Versions: Brizy Pro versions n/a through 2.6.1 Description: The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For versions n/a through...

PT-2025-15836 · Drupal · Drupal Panels

Name of the Vulnerable Software and Affected Versions: Drupal Panels versions 0.0.0 through 4.9.0 Description: The issue affects Drupal Panels due to missing authentication for a critical function, allowing exploitation of incorrectly configured access control security levels. Recommendations: Fo...

PT-2025-15744 · Unknown · Bdoga Social Crowd

Name of the Vulnerable Software and Affected Versions: bdoga Social Crowd versions 0.9.6.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions 0.9.6.1 and earlier, update to a version that contains a fix for...

PT-2025-15731 · Woocommerce · Pagopar – Woocommerce Gateway

Name of the Vulnerable Software and Affected Versions: Pagopar - Grupo M S.A. Pagopar – WooCommerce Gateway versions through 2.7.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability and Stored XSS in Pagopar – WooCommerce Gateway. Recommendations: For versions...

PT-2025-15795 · Unknown · Debounce Email Validator

Name of the Vulnerable Software and Affected Versions: DeBounce Email Validator versions n/a through 5.7.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject...

PT-2025-15778 · Wpwax · Wpwax Logo Showcase Ultimate

Name of the Vulnerable Software and Affected Versions: wpWax Logo Showcase Ultimate versions 1.4.4 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File...

PT-2025-15694 · Progress · Sitefinity

Name of the Vulnerable Software and Affected Versions: Sitefinity versions 14.0 through 14.3 Sitefinity versions 14.4 before 14.4.8145 Sitefinity versions 15.0 before 15.0.8231 Sitefinity versions 15.1 before 15.1.8332 Sitefinity versions 15.2 before 15.2.8429 Description: The issue is related to...

PT-2025-15782 · Unknown · Jose Conti Link Shield

Name of the Vulnerable Software and Affected Versions: Jose Conti Link Shield versions 0.5.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-15790 · Reve Chat · Reve Chat

Name of the Vulnerable Software and Affected Versions: REVE Chat versions n/a through 6.2.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability and Stored XSS in REVE Chat. Recommendations: For versions n/a through 6.2.2, update to a version that contains a fix fo...

PT-2025-15727 · Unknown · Nav Menu Manager

Name of the Vulnerable Software and Affected Versions: Nav Menu Manager versions 3.2.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-15775 · Unknown · Ultra Demo Importer

Name of the Vulnerable Software and Affected Versions: Ultra Demo Importer versions 1.0.5 and earlier Description: A Cross-Site Request Forgery CSRF issue allows attackers to upload a web shell to a web server. This enables potential cyber threats, including server compromise. Recommendations: Fo...

PT-2025-15751 · Icyleaf · Icyleaf Ws Audio Player

Name of the Vulnerable Software and Affected Versions: icyleaf WS Audio Player versions 1.1.8 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions 1.1.8 and earlier, update to a version that fixes th...

PT-2025-15723 · Unknown · Uzair Easyfonts

Name of the Vulnerable Software and Affected Versions: Uzair Easyfonts versions 1.1.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions 1.1.2 and earlie...

PT-2025-15976 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 13.12 through 17.8.6 GitLab CE/EE versions 17.9 through 17.9.5 GitLab CE/EE versions 17.10 through 17.10.3 Description: An issue has been discovered affecting GitLab CE/EE, where under certain conditions, users could...

PT-2025-15785 · Unknown · Hivedigital Canonical Attachments

Name of the Vulnerable Software and Affected Versions: hivedigital Canonical Attachments versions n/a through 1.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

PT-2025-15811 · Ip2Location · Ip2Location Ip2Location World Clock

Name of the Vulnerable Software and Affected Versions: ip2location IP2Location World Clock versions 1.1.9 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker could potentially trick a user into performing...

PT-2025-15805 · WordPress · Vsourz Digital Wp Map Route Planner

Name of the Vulnerable Software and Affected Versions: Vsourz Digital WP Map Route Planner versions 1.0.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For Vsourz Digital WP Map Route Planner versio...

PT-2025-15784 · Unknown · Hossainawlad Ald Login Page

Name of the Vulnerable Software and Affected Versions: hossainawlad ALD Login Page versions n/a through 1.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS in the hossainawlad ALD Login Page. Recommendations: For versions n/a throug...

PT-2025-15739 · Unknown · Woo Product Feed For Marketing Channels

Name of the Vulnerable Software and Affected Versions: Woo Product Feed For Marketing Channels versions 1.9.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

PT-2025-15753 · Unknown · Newsboard Post/Rss Scroller

Name of the Vulnerable Software and Affected Versions: NewsBoard Post and RSS Scroller versions 1.2.12 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in the NewsBoard Plugin. Recommendations: For NewsBoard Post and RSS Scroller version...