PT-2025-4446 · Unknown · Cf7Save Extension

Name of the Vulnerable Software and Affected Versions: Cf7Save Extension versions prior to 1 Description: The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables attackers to inject malicious scripts into w...

PT-2025-2476 · Unknown · Blossom Shop

Name of the Vulnerable Software and Affected Versions: Blossom Shop versions 1.1.7 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the user into...

PT-2024-12673 · Miniorange · Miniorange Yourmembership Single Sign On

Name of the Vulnerable Software and Affected Versions: miniOrange YourMembership Single Sign On versions 1.1.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels...

PT-2024-13500 · Themewinter · Wpcafe

Name of the Vulnerable Software and Affected Versions: WPCafe versions through 2.2.22 Description: The issue is related to a Missing Authorization vulnerability in Themewinter WPCafe, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...

PT-2024-12084 · Ninja Team · Filebird

Name of the Vulnerable Software and Affected Versions: Ninja Team Filebird versions through 5.1.4 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 5.1.4,...

PT-2024-35308 · Leadboxer · Leadboxer

Name of the Vulnerable Software and Affected Versions: LeadBoxer versions prior to 1.2 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This problem affects LeadBoxer, enabling...

PT-2024-34849 · WordPress · Srcset Responsive Images

Name of the Vulnerable Software and Affected Versions: SrcSet Responsive Images for WordPress versions 1.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...

PT-2024-34771 · Unknown · Ezyonlinebookings Online Booking System Widget

Name of the Vulnerable Software and Affected Versions: EzyOnlineBookings Online Booking System Widget versions 1.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for DOM-Based XSS...

PT-2024-30348 · Ncrafts · Formcraft

Name of the Vulnerable Software and Affected Versions: nCrafts FormCraft versions 1.2.10 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions 1.2.10 and...

PT-2024-33616 · Unknown · Chatplusjp

Name of the Vulnerable Software and Affected Versions: chatplusjp versions n/a through 1.02 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, which allows Reflected XSS. This means that an attacker can inject malicious scripts into a website,...

PT-2024-10318 · Ibm · Ibm Qradar Wincollect Agent

Name of the Vulnerable Software and Affected Versions: IBM QRadar WinCollect Agent versions 10.0.0 through 10.1.12 Description: The issue is related to the improper input validation of assumed immutable data, which could allow a remote attacker to inject XML data into parameter values. This could...

PT-2024-34255 · Woocommerce · Woocommerce Quote Calculator

Name of the Vulnerable Software and Affected Versions: WooCommerce Quote Calculator versions 1.1 and earlier Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL Injection...

PT-2024-33390 · Leyka · Leyka

Name of the Vulnerable Software and Affected Versions: Leyka versions prior to 3.31.6 Description: The issue is related to the exposure of sensitive system information to an unauthorized control sphere. This is a problem where sensitive information is accessible to unauthorized parties, potential...

PT-2024-38454 · Unknown +1 · Contact Form 7 +1

Name of the Vulnerable Software and Affected Versions: Contact Form to Any API plugin for WordPress versions 1.2.2 and earlier Description: The issue is related to Stored Cross-Site Scripting via Contact Form 7 form fields due to insufficient input sanitization and output escaping. This allows...

PT-2024-31428 · Ibm · Ibm Aspera Faspex

Name of the Vulnerable Software and Affected Versions: IBM Aspera Faspex versions 5.0.0 through 5.0.9 Description: The issue allows a user to bypass intended access restrictions and conduct resource modification. Recommendations: For IBM Aspera Faspex versions 5.0.0 through 5.0.9, update to a...

PT-2024-9552

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.21 and earlier Description The issue is related to insufficient authorization procedures in the system, allowing a remote attacker to bypass security restrictions. A low-privileged attacker could leverage...

PT-2024-27056 · Fabedge · Fabedge

Name of the Vulnerable Software and Affected Versions: fabedge version 0.8.1 Description: The issue concerns insecure permissions in fabedge, allowing attackers to access sensitive data and escalate privileges by obtaining the service account's token. Recommendations: For fabedge version 0.8.1,...

PT-2024-37192 · WordPress · Wordpress File Upload

Name of the Vulnerable Software and Affected Versions: WordPress File Upload plugin for WordPress versions up to, and including, 4.24.7 Description: The issue allows authenticated attackers with Contributor-level access and above to upload limited files to arbitrary locations on the web server du...

PT-2024-22647 · Dell · Dell Common Event Enabler

Name of the Vulnerable Software and Affected Versions: Dell Common Event Enabler versions 8.9.10.0 and prior Description: The issue is related to an insecure deserialization vulnerability in CAVATools. A local unauthenticated attacker could potentially exploit this, leading to arbitrary code...

PT-2024-5924 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.20 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability in Adobe Experience Manager. This vulnerability could be exploited by an attacker to inject malicious...