PT-2025-5404 · WordPress · Wp Mailster

Name of the Vulnerable Software and Affected Versions: WP Mailster versions 1.8.15.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This enables attackers to inject...

PT-2025-5558 · Houzez · Houzez

Name of the Vulnerable Software and Affected Versions: Houzez versions prior to 3.4.0 Description: The issue is related to a lack of authorization in Houzez. This problem affects Houzez, with details about the estimated number of potentially affected devices worldwide not provided. Information...

Important: redis

Issue Overview: Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional...

PT-2025-5471 · WordPress · Woocommerce Cloak Affiliate Links

Name of the Vulnerable Software and Affected Versions: WooCommerce Cloak Affiliate Links versions 1.0.0 through 1.0.35 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This means an attacker can trick a user into performing...

PT-2025-3164 · Cfengine · Cfengine Enterprise Mission Portal

Name of the Vulnerable Software and Affected Versions: CFEngine Enterprise Mission Portal versions 3.21.5 and below CFEngine Enterprise Mission Portal version 3.24.0 Description: The issue allows for XSS. The estimated number of potentially affected devices worldwide is not available. There is no...

PT-2025-4646 · Unknown · Vikappointments Services Booking Calendar

Name of the Vulnerable Software and Affected Versions: VikAppointments Services Booking Calendar versions 1.2.16 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site Scripting XSS. This means an attacker can...

Microsoft Security Advisory CVE-2025-21171 | .NET Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2025-21171 | .NET Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 9.0. This advisory also provides guidance on what developers can do to update their applicatio...

PT-2025-4348

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.127 Linux kernel versions prior to 6.6.74 Linux kernel versions prior to 6.12.11 Description The issue is related to the iomap write delalloc scan function in the Linux kernel, which can lead to an infinite...

PT-2025-3234 · WordPress · Wp Securesubmit

Name of the Vulnerable Software and Affected Versions: WP SecureSubmit versions 1.5.16 and earlier Description: The issue is related to a missing authorization vulnerability in SecureSubmit WP, which allows the exploitation of incorrectly configured access control security levels. Recommendations...

PT-2025-1536 · Unknown · Cocart – Headless Ecommerce

Name of the Vulnerable Software and Affected Versions: CoCart – Headless ecommerce versions through 3.11.2 Description: The issue affects CoCart – Headless ecommerce due to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels...

PT-2025-52665

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.0-rc1-next Description The Linux kernel contains an issue within the jbd2 journaling system. A bug can occur in the jbd2 journal get create access function when the file system is corrupted. Specifically, th...

PT-2024-36752 · WordPress · Contact Form 7 – Dynamic Text Extension

Name of the Vulnerable Software and Affected Versions: Contact Form 7 Dynamic Text Extension versions n/a through 5.0.1 Description: A Cross-Site Request Forgery CSRF issue affects the Contact Form 7 Dynamic Text Extension, allowing unauthorized requests. This can lead to Cross Site Request...

PT-2024-36677 · Wplms · Wplms

Name of the Vulnerable Software and Affected Versions: WPLMS versions prior to 1.9.9.5.3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...

PT-2024-17545 · WordPress · Essential Real Estate

Name of the Vulnerable Software and Affected Versions: Essential Real Estate plugin for WordPress versions up to and including 5.1.6 Description: The issue is related to a missing capability check on several pages and post types, allowing authenticated attackers with Contributor-level access and...

PT-2024-17403 · WordPress · Snippet Shortcodes

Name of the Vulnerable Software and Affected Versions: Snippet Shortcodes plugin for WordPress versions up to and including 4.1.6 Description: The issue is related to missing authorization, allowing authenticated attackers with Subscriber-level access and above to delete the plugin's shortcodes. ...

PT-2024-35229 · Genetech · Pie Register Premium

Name of the Vulnerable Software and Affected Versions: Pie Register Premium versions prior to 3.8.3.3 Description: The issue is related to a Missing Authorization vulnerability in Genetech Pie Register Premium. Recommendations: For versions prior to 3.8.3.3, update to version 3.8.3.3 or later to...

PT-2024-16702 · Nec · Univerge Ix

Name of the Vulnerable Software and Affected Versions: NEC Corporation UNIVERGE IX versions 9.2 through 10.10.21 NEC Corporation UNIVERGE IX versions 10.8 through 10.8.27 NEC Corporation UNIVERGE IX versions 10.9 through 10.9.14 Description: The issue allows an attacker to hijack the authenticati...

PT-2024-34174 · Qnap · Qnap Qts +1

Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.2.1.2930 build 20241025 QNAP QuTS hero versions prior to h5.2.1.2929 build 20241025 Description: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system...

PT-2024-34177 · Qnap · Qnap Qts +1

Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.2.1.2930 build 20241025 QNAP QuTS hero versions prior to h5.2.1.2929 build 20241025 Description: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system...

PT-2024-35228 · Unknown · Cyan Backup

Name of the Vulnerable Software and Affected Versions: CYAN Backup versions n/a through 2.5.3 Description: The issue is related to a Path Traversal vulnerability, specifically a '.../...//' vulnerability, which affects CYAN Backup. This allows for Path Traversal. Recommendations: For CYAN Backup...