PT-2025-30947 · WordPress · Geodirectory – Wp Business Directory Plugin +1

Name of the Vulnerable Software and Affected Versions: GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress versions prior to 2.8.98 Description: The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is...

PT-2025-30968 · WordPress · Kallyas

Name of the Vulnerable Software and Affected Versions: Kallyas versions prior to 4.21.1 Description: The Kallyas theme for WordPress is susceptible to arbitrary folder deletion due to inadequate file path validation within the delete font function. Authenticated attackers possessing...

PT-2025-30733 · WordPress · Droip

Name of the Vulnerable Software and Affected Versions: Droip versions prior to 2.2.1 Description: The Droip plugin for WordPress is susceptible to arbitrary file uploads due to missing file type validation in the make google font offline function. This allows authenticated attackers with...

PT-2025-30717 · Openai +1 · Openai Codex Cli +1

Name of the Vulnerable Software and Affected Versions: OpenAI Codex CLI versions prior to 0.9.0 Description: The OpenAI Codex CLI application automatically approves the execution of ripgrep rg even when specific flags—--pre, --hostname-bin, --search-zip, or -z—are used. Recommendations: Update to...

PT-2025-30894 · Sitecore · Sitecore Experience Platform +2

Name of the Vulnerable Software and Affected Versions: Sitecore Experience Manager XM versions 8.0 Initial Release through 10.4 Initial Release Sitecore Experience Platform XP versions 8.0 Initial Release through 10.4 Initial Release Sitecore Experience Commerce XC versions 8.0 Initial Release...

PT-2025-30931 · Grav · Grav

Name of the Vulnerable Software and Affected Versions: grav versions 1.7.46 through 1.7.48 Description: A Cross Site Scripting issue exists in grav that allows an attacker to execute arbitrary code via the onerror attribute of the img element. Recommendations: Update grav to a version later than...

PT-2025-30915 · Grav · Grav

Name of the Vulnerable Software and Affected Versions: grav versions prior to 1.7.49 Description: A Cross Site Scripting vulnerability exists in grav versions prior to 1.7.49. This allows an attacker to execute arbitrary code via a crafted script to the form fields. Recommendations: Update to gra...

PT-2025-30882 · Silicon · Siwx91X

Name of the Vulnerable Software and Affected Versions: Silicon Labs SiWx91x versions prior to 3.4.0 Description: The APIs sl si91x aes, sl si91x gcm, sl si91x ccm, and sl si91x sha did not validate the size of the output buffer provided by the caller. This could result in data corruption on the...

PT-2025-30779

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 6.16.0-rc3 and earlier Description A warning occurred when reconnecting a channel in the SMB2 protocol. Specifically, a dummy tcon was passed to smb2 reconnect with an uninitialized query interface, leading to an issue wh...

PT-2025-30819 · WordPress · Apwide Golive Jira Plugin

Name of the Vulnerable Software and Affected Versions: Apwide Golive Jira plugin version 10.2.0 Description: The Apwide Golive Jira plugin contains a Server-Side Request Forgery SSRF issue. This issue is related to the test webhook function, which allows for potential exploitation through...

PT-2025-30814 · Jhipster · Jhipster

Name of the Vulnerable Software and Affected Versions: JHipster versions prior to 8.9.0 Description: JHipster versions prior to 8.9.0 are susceptible to privilege escalation through manipulation of the authorities parameter. After registering and logging in as a standard user, the authorities...

PT-2025-30743

Name of the Vulnerable Software and Affected Versions Kron PAM versions prior to 3.7 Description Kron PAM is susceptible to a denial-of-service DoS attack due to unrestricted resource allocation. This allows an attacker to exhaust system resources via HTTP requests. Recommendations Update Kron PA...

PT-2025-30943

Vulnerability Summary Name of the Vulnerable Software and Affected Versions skops versions 0.11.0 and below Description skops is a Python library used for sharing and shipping scikit-learn based models. An inconsistency in the OperatorFuncNode allows exploitation to hide the execution of untruste...

PT-2025-30937

Name of the Vulnerable Software and Affected Versions Linkify versions 4.3.1 through 4.3.2 Description The software contains an improperly controlled modification of object prototype attributes 'Prototype Pollution' issue. This can lead to cross-site scripting XSS attacks targeting HTML attribute...

PT-2025-30909 · Unknown · Codeigniter4

Name of the Vulnerable Software and Affected Versions: CodeIgniter4 version 4.6.0 Description: A stored cross-site scripting XSS vulnerability exists in CodeIgniter4. Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the debugbar time parameter...

PT-2025-30645 · WordPress · Muse.Ai Video Embedding Plugin

Name of the Vulnerable Software and Affected Versions: muse.ai video embedding plugin for WordPress versions up to and including 0.4 Description: The muse.ai video embedding plugin for WordPress is susceptible to Stored Cross-Site Scripting through the plugin’s muse-ai shortcode. Insufficient inp...

PT-2025-30705 · WordPress · Elementskit Elementor Addons/Templates

Name of the Vulnerable Software and Affected Versions: ElementsKit Elementor Addons and Templates versions prior to 3.5.3 Description: The ElementsKit Elementor Addons and Templates plugin for WordPress is susceptible to Stored Cross-Site Scripting via the URL attribute of a custom widget due to...

PT-2025-30652 · WordPress · Funnelcockpit

Name of the Vulnerable Software and Affected Versions: FunnelCockpit plugin for WordPress versions up to and including 1.4.2 Description: The plugin is susceptible to Reflected Cross-Site Scripting via the error parameter due to insufficient input sanitization and output escaping. This allows...

PT-2025-30658 · WordPress · Ithoughts Advanced Code Editor

Name of the Vulnerable Software and Affected Versions: iThoughts Advanced Code Editor plugin for WordPress versions through 1.2.10 Description: The iThoughts Advanced Code Editor plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation on the...

PT-2025-30660 · WordPress · Get Youtube Subs

Name of the Vulnerable Software and Affected Versions: Get Youtube Subs plugin for WordPress versions up to and including 3.5 Description: The Get Youtube Subs plugin for WordPress is susceptible to Stored Cross-Site Scripting through the channel, layout, and subs count parameters. Insufficient...