PT-2025-29987 · WordPress · Plugin Pengiriman Woocommerce Kurir Reguler

Name of the Vulnerable Software and Affected Versions: Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship versions through 3.2.0 Description: The Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship for WordPress is susceptible to an Insecure Direct Object...

PT-2025-30051 · Melange · Melange

Name of the Vulnerable Software and Affected Versions: melange versions 0.23.0 through 0.29.4 Description: melange allows users to build apk packages using declarative pipelines. SBOM files generated by melange in apks had file system permissions mode 666, potentially allowing an unprivileged use...

PT-2025-29990 · WordPress · Aapanel Wp Toolkit

Name of the Vulnerable Software and Affected Versions: aapanel WP Toolkit versions 1.0 through 1.1 Description: The aapanel WP Toolkit plugin for WordPress is susceptible to privilege escalation due to missing authorization checks within the auto login function. Authenticated attackers with...

PT-2025-29985 · WordPress · Wp Knowledgebase

Name of the Vulnerable Software and Affected Versions: Knowledge Base plugin for WordPress versions prior to 2.3.2 Description: The Knowledge Base plugin for WordPress is susceptible to Stored Cross-Site Scripting via the plugin slug setting due to insufficient input sanitization and output...

PT-2025-29997 · WordPress · Testimonial Post Type Plugin

Name of the Vulnerable Software and Affected Versions: Testimonial Post type plugin for WordPress versions prior to 1.2.2 Description: The Testimonial Post type plugin for WordPress is susceptible to Stored Cross-Site Scripting through the auto play parameter. Insufficient input sanitization and...

PT-2025-29928 · Unknown · Haichang Oa

Name of the Vulnerable Software and Affected Versions: Haichang OA version 1.0.0 Description: The software contains a SQL Injection vulnerability. A remote attacker can obtain sensitive information via the if parameter in hcit.project.rte.agents.UploadImages.class. Recommendations: Update to a...

PT-2025-29912

Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 1.10.9-lts MaxKB versions prior to 2.0.0 Description A Remote Command Execution issue exists in the MCP call. Recommendations Update to version 1.10.9-lts or later. Update to version 2.0.0 or later...

PT-2025-30054 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.6 Description: WeGIA is an open source web manager designed for the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability exists in the pre cadastro atendido.php...

PT-2025-29980

Name of the Vulnerable Software and Affected Versions Brocade ASCG versions prior to 3.3.0 Description A vulnerability exists in the ascgshell component of Brocade ASCG. The software stores commands executed in the Command Line Interface CLI in plain text within the command history. A locally...

PT-2025-29904

Name of the Vulnerable Software and Affected Versions Stop User Enumeration WordPress plugin versions prior to 1.7.3 Description The Stop User Enumeration WordPress plugin blocks REST API /wp-json/wp/v2/users/ requests for non-authorized users. This protection can be bypassed by URL-encoding the...

PT-2025-29920 · Unknown · Diracx-Web

Name of the Vulnerable Software and Affected Versions: DiracX-Web versions prior to 0.1.0-a8 Description: DiracX-Web is a web application that provides an interface to interact with the DiracX services. An attacker can forge a request to redirect an authenticated user to an arbitrary website. The...

PT-2025-30059 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.6 Description: WeGIA is an open source web manager. A SQL Injection vulnerability exists in the /html/atendido/Profile Atendido.php endpoint, specifically in the idatendido parameter. This allows an attacker to...

PT-2025-30057 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.6 Description: WeGIA is an open source web manager designed for the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability exists in the personalizacao.php endpoint...

PT-2025-29917 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.6 Description: WeGIA is an open source web manager. A SQL Injection vulnerability exists in the idatendido familiares parameter of the /html/funcionario/dependente editarDoc.php endpoint. This allows manipulation o...

PT-2025-29916 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.6 Description: WeGIA is an open source web manager. A SQL Injection issue was identified that allows an attacker to manipulate SQL queries and access sensitive database information. The vulnerability exists in the...

PT-2025-29693 · WordPress · Events Manager – Calendar

Name of the Vulnerable Software and Affected Versions: WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce versions prior to 3.1.50 Description: The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is susceptible to...

PT-2025-29816 · Unknown · Uxper Sala

Name of the Vulnerable Software and Affected Versions: uxper Sala versions n/a through 1.1.3 Description: A missing authorization issue exists in uxper Sala, allowing access to functionality not properly constrained by Access Control Lists ACLs. Recommendations: Update uxper Sala to a version...

PT-2025-29692 · WordPress · Events Manager – Calendar

Name of the Vulnerable Software and Affected Versions: WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce versions up to and including 3.1.49 Description: The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress contai...

PT-2025-29881 · Linknat · Linknat Vos3000 +2

Name of the Vulnerable Software and Affected Versions: Linknat VOS Manager versions prior to 2.1.9.07 Linknat VOS2009 Linknat VOS3000 early builds Description: A path traversal issue exists in Linknat VOS Manager that allows unauthenticated remote attackers to read arbitrary files on the server...

PT-2025-29806 · Woocommerce · Nc Wishlist For Woocommerce

Name of the Vulnerable Software and Affected Versions: Wishlist for WooCommerce versions n/a through 3.2.3 Description: The software contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations: Update Wishlist for WooCommerce to a version...