PT-2025-14400 · Woocommerce · Plugin Oficial – Getnet Para Woocommerce

Name of the Vulnerable Software and Affected Versions: Plugin Oficial – Getnet para WooCommerce versions 1.7.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS...

PT-2025-14264 · WordPress · Wp Multi Store Locator

Name of the Vulnerable Software and Affected Versions: WP Multistore Locator versions n/a through 2.5.2 Description: A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed on behalf of a user. This can lead to various security problems, including data modification or...

PT-2025-14234 · Unknown · Brainvireinfo Export All Post Meta

Name of the Vulnerable Software and Affected Versions: brainvireinfo Export All Post Meta versions 1.2.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For brainvireinf...

PT-2025-14084 · WordPress · Wdesignkit

Name of the Vulnerable Software and Affected Versions: The WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPress versions up to, and including, 1.2.2 Description: The issue is related to Stored Cross-Site Scripting via custom widgets...

PT-2025-14022 · Valmet · Valmet Dna

Name of the Vulnerable Software and Affected Versions: Valmet DNA versions prior to C2023 Description: The issue concerns an insecure DCOM configuration in Valmet DNA, specifically with the DCOM object Valmet DNA Engineering. This object has permissions that allow it to run commands as a user wit...

PT-2025-14391 · Vform · Vform

Name of the Vulnerable Software and Affected Versions: VForm versions 3.1.9 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions 3.1.9 and earlier,...

PT-2025-14030 · Unknown · Breezing Forms

Name of the Vulnerable Software and Affected Versions: Breezing Forms versions 1.2.8.11 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions 1.2.8.11...

PT-2025-14193 · Xtreme · Planyo

Name of the Vulnerable Software and Affected Versions: xtreeme Planyo online reservation system versions n/a through 3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that a...

PT-2025-14454 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 135.0.7049.52 Description: The issue is related to an inappropriate implementation in Custom Tabs, allowing a remote attacker to perform UI spoofing via a crafted HTML page if the user is convinced to engage in...

PT-2025-14244 · Joomsky · Joomsky Js Job Manager

Name of the Vulnerable Software and Affected Versions: JoomSky JS Job Manager versions through 2.0.2 Description: The issue affects the access control security levels in JoomSky JS Job Manager, allowing for authorization bypass through user-controlled key exploitation. This occurs due to...

PT-2025-14104

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 137 Firefox ESR versions prior to 128.9 Thunderbird versions prior to 137 Thunderbird ESR versions prior to 128.9 Description A crafted URL containing specific Unicode characters could hide the true origin of the page...

PT-2025-14135 · Feedblitz · Arni Cinco Subscription Form For Feedblitz

Name of the Vulnerable Software and Affected Versions: Arni Cinco Subscription Form for Feedblitz versions 1.0.0 through 1.0.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means...

PT-2025-16446

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox version 7.1.6 Description: This is a high-severity vulnerability in Oracle VM VirtualBox that allows a high-privileged attacker to compromise the software. Successful exploitation can lead to unauthorized access to,...

PT-2025-14162 · WordPress · Uptime Robot Plugin

Name of the Vulnerable Software and Affected Versions: Uptime Robot Plugin for WordPress versions n/a through 2.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. Recommendations: For versions n/a through 2.3, update to a...

PT-2025-14248 · WordPress · Galaxy Weblinks Wp Clone Any Post Type

Name of the Vulnerable Software and Affected Versions: Galaxy Weblinks WP Clone any post type versions n/a through 3.4 Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, which allows phishing attacks. This vulnerability can be...

PT-2025-14226 · WordPress · Wpfactory Wordpress Adverts Plugin

Name of the Vulnerable Software and Affected Versions: WPFactory WordPress Adverts Plugin versions 1.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: F...

PT-2025-14109

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 137 Thunderbird versions prior to 137 Description The issue concerns memory safety bugs that were present in certain versions of Firefox and Thunderbird. Some of these bugs showed evidence of memory corruption, and it...

CVE-2025-3019 Cross-site scripting vulnerabilities in KNIME Business Hub web pages

KNIME Business Hub is affected by several cross-site scripting vulnerabilities in its web pages. If a user clicks on a malicious link or opens a malicious web page, arbitrary Java Script may be executed with this user's permissions. This can lead to information loss and/or modification of existin...

PT-2025-13987 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: A permissions issue was addressed with additional restrictions. An app may be able to read files outside of its sandbox. Recommendations: For versions prior to 15.4, update to macOS Sequoia 15.4 to...

PT-2025-13954 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 macOS versions prior to 14.7.5 Description: An access issue was addressed with additional sandbox restrictions. This issue allows an app to potentially access user-sensitive data. Recommendations: For macOS versio...