PT-2025-17174 · Spicethemes · Spice Blocks

Name of the Vulnerable Software and Affected Versions: spicethemes Spice Blocks versions 2.0.7.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For version...

PT-2025-16986 · Unknown · Revision Diet

Name of the Vulnerable Software and Affected Versions: Revision Diet versions n/a through 1.0.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions n/a through 1.0.1, update to a version that contains a fix for this issue...

PT-2025-17096 · Unknown · Cool Flipbox – Shortcode & Gutenberg Block

Name of the Vulnerable Software and Affected Versions: Cool Flipbox – Shortcode & Gutenberg Block versions 1.8.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS...

PT-2025-17155 · Unknown · Projectopia

Name of the Vulnerable Software and Affected Versions: Projectopia versions through 5.1.16 Description: The issue is related to an Incorrect Privilege Assignment vulnerability, which allows Privilege Escalation in Projectopia. Recommendations: For versions through 5.1.16, update to a version late...

PT-2025-16953 · WordPress · The Forminator Forms

Name of the Vulnerable Software and Affected Versions: The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress versions up to, and including, 1.42.0 Description: The issue allows unauthenticated attackers to reuse a single Stripe PaymentIntent for multiple...

PT-2025-17181 · Crm Perks · Crm Perks

Name of the Vulnerable Software and Affected Versions: CRM Perks versions 1.1.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. Specifically, it is a Reflected XSS vulnerability, which means that an...

PT-2025-17186 · Unknown · Taskbuilder

Name of the Vulnerable Software and Affected Versions: Taskbuilder versions prior to 4.0.1 Description: The issue is related to improper neutralization of special elements used in an SQL command, which allows Blind SQL Injection. This means that an attacker can inject malicious SQL code into the...

PT-2025-17053 · Unknown · Saoshyant Slider

Name of the Vulnerable Software and Affected Versions: Saoshyant Slider versions n/a through 3.0 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions n/a through 3.0, update to a version that fixes the Deserialization...

PT-2025-16971 · Unknown · Rachanas Sponsered Link

Name of the Vulnerable Software and Affected Versions: rachanaS Sponsered Link versions n/a through 4.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS in rachanaS Sponsered Link...

PT-2025-17168 · Unknown · Mapsvg Lite

Name of the Vulnerable Software and Affected Versions: MapSVG Lite versions prior to 8.5.35 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server. This can lead to further exploitation and potential...

PT-2025-17182 · Woocommerce · Bring Fraktguiden For Woocommerce

Name of the Vulnerable Software and Affected Versions: Bring Fraktguiden for WooCommerce versions 1.11.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

PT-2025-17123 · Unknown · Mapro Collins Coming Soon Countdown

Name of the Vulnerable Software and Affected Versions: Mapro Collins Coming Soon Countdown versions n/a through 2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

PT-2025-17057 · WordPress · Uxgallery Wordpress Photo Gallery

Name of the Vulnerable Software and Affected Versions: uxgallery WordPress Photo Gallery – Image Gallery versions prior to 2.0.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS...

PT-2025-17004 · Unknown · Anthologize

Name of the Vulnerable Software and Affected Versions: Anthologize versions 0.8.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For Anthologize versions 0.8.3 an...

PT-2025-17150 · WordPress · Ketanajani Wp Donate

Name of the Vulnerable Software and Affected Versions: ketanajani WP Donate versions n/a through 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an attacker can...

PT-2025-16999 · Bbpress2 · Bbpress2

Name of the Vulnerable Software and Affected Versions: bbPress2 shortcode whitelist versions 2.2.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS attacks. This is due to a vulnerability in the bbPress2...

PT-2025-17095 · WordPress · Wordpress Health/Server Condition – Integrated With Google Page Speed

Name of the Vulnerable Software and Affected Versions: WordPress Health and Server Condition – Integrated with Google Page Speed versions through 4.1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows...

PT-2025-17055 · Unknown · Bjornw File Icons

Name of the Vulnerable Software and Affected Versions: BjornW File Icons versions n/a through 2.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to injec...

PT-2025-17151 · Weptile · Weptile Shopapper

Name of the Vulnerable Software and Affected Versions: weptile ShopApper versions 0.4.39 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an attacker can...

PT-2025-16966 · Think201 · Think201 Data Dash

Name of the Vulnerable Software and Affected Versions: Think201 Data Dash versions 1.2.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can injec...