PT-2025-30568 · Joomla · Dj-Reviews

Name of the Vulnerable Software and Affected Versions: DJ-Reviews versions 1.0 through 1.3.6 Description: A Reflected Cross-Site Scripting XSS issue exists in the DJ-Reviews component for Joomla. This allows an attacker to inject malicious scripts into a web page viewed by other users...

PT-2025-30527 · Samsung · Magicinfo 9 Server

Name of the Vulnerable Software and Affected Versions: MagicINFO 9 Server versions prior to 21.1080.0 Description: An unrestricted file upload issue with dangerous file types exists in Samsung Electronics MagicINFO 9 Server, potentially leading to code injection. Recommendations: Update MagicINFO...

PT-2025-30544 · WordPress · Qwizcards

Name of the Vulnerable Software and Affected Versions: Qwizcards | online quizzes and flashcards WordPress plugin versions through 3.9.4 Description: The WordPress plugin does not properly sanitize and escape the stylesheet parameter before outputting it, leading to a Reflected Cross-Site Scripti...

PT-2025-30616 · Unknown · Lbry-Desktop

Name of the Vulnerable Software and Affected Versions: lbry-desktop version 0.53.9 Description: A URL redirection issue exists in lbry-desktop version 0.53.9, potentially allowing attackers to redirect users to malicious websites. Recommendations: Update lbry-desktop to a newer version that...

PT-2025-30501 · Poly · Poly Clariti Manager

Name of the Vulnerable Software and Affected Versions: Poly Clariti Manager versions prior to 10.12.1 Description: A security issue has been identified in Poly Clariti Manager that may allow the retrieval of hardcoded cryptographic keys. Recommendations: Update Poly Clariti Manager to version...

PT-2025-30416 · Hotelrunner · Hotelrunner B2B

Name of the Vulnerable Software and Affected Versions: HotelRunner B2B versions prior to 04.06.2025 Description: This issue allows for Cross-Site Scripting XSS. The vulnerability is due to improper neutralization of input during web page generation. Recommendations: Update HotelRunner B2B to...

PT-2025-30442

Name of the Vulnerable Software and Affected Versions Dagster version 1.10.14 Description A local file inclusion issue exists in the dagster. grpc.impl.get notebook data function. Attackers with access to the gRPC server can read arbitrary files by providing path traversal sequences in the notebo...

PT-2025-30385 · WordPress · Birth Chart Compatibility

Name of the Vulnerable Software and Affected Versions: Birth Chart Compatibility plugin for WordPress versions prior to 2.1 Description: The Birth Chart Compatibility plugin for WordPress is susceptible to full path disclosure due to insufficient protection against direct access to the plugin's...

PT-2025-30378 · WordPress · Wp Jobhunt

Name of the Vulnerable Software and Affected Versions: WP JobHunt versions prior to 7.3 Description: The WP JobHunt plugin for WordPress is susceptible to an Insecure Direct Object Reference issue in all versions up to and including 7.2, specifically within the cs remove profile callback function...

PT-2025-30500 · Poly · Poly Clariti Manager

Name of the Vulnerable Software and Affected Versions: Poly Clariti Manager versions prior to 10.12.1 Description: A potential SQL injection issue has been identified. The issue could allow a privileged user to execute SQL commands. Recommendations: Update Poly Clariti Manager to version 10.12.1 ...

PT-2025-30373

Name of the Vulnerable Software and Affected Versions Website Contact Form With File Upload for WordPress versions up to 1.3.4 Description The Website Contact Form With File Upload plugin for WordPress is susceptible to arbitrary file uploads due to insufficient file type validation within the...

PT-2025-30325 · Ibm · Ibm Cognos Analytics Mobile

Name of the Vulnerable Software and Affected Versions: IBM Cognos Analytics Mobile iOS versions 1.1.0 through 1.1.22 Description: IBM Cognos Analytics Mobile iOS is susceptible to a security issue that may allow malicious actors to obtain sensitive information. This is due to the cleartext...

PT-2025-30336 · Phproxy · Phproxy

Name of the Vulnerable Software and Affected Versions: PHProxy versions prior to 1.1.1 Description: A Server-Side Request Forgery SSRF issue exists in the URL processing functionality. Insufficient input validation for the proxurl parameter allows a remote, unauthenticated attacker to submit a...

PT-2025-30244 · WordPress · Shortcodes Ultimate

Name of the Vulnerable Software and Affected Versions: WP Shortcodes Plugin — Shortcodes Ultimate versions prior to 7.4.2 Description: The WordPress Shortcodes Ultimate plugin is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation on the preview function. This...

PT-2025-30288 · Sk Telecom · Com.Skt.Prod.Dialer

Name of the Vulnerable Software and Affected Versions: com.skt.prod.dialer versions through 12.5.0 Description: The application allows any installed application, without requiring any permissions, to initiate phone calls without user interaction. This is achieved by sending a specially crafted...

PT-2025-30362

Name of the Vulnerable Software and Affected Versions pyLoad versions prior to 0.5.0b3.dev90 Description pyLoad contains an authenticated path traversal vulnerability in the /json/upload endpoint. By manipulating the filename of an uploaded file, an attacker can traverse out of the intended uploa...

PT-2025-30259 · Unknown · Two App Studio Journey

Name of the Vulnerable Software and Affected Versions: Two App Studio Journey version 5.5.9 Description: The application stores data in an unencrypted format within its database on iOS devices. This allows local attackers to extract sensitive information by directly accessing the application’s...

PT-2025-30343

Name of the Vulnerable Software and Affected Versions Manager-io/Manager versions up to and including 25.7.18.2519 Description Manager-io/Manager is accounting software with a critical unauthenticated Server-Side Request Forgery SSRF vulnerability identified in the proxy handler component. This...

PT-2025-30243 · WordPress · Shortcodes Ultimate

Name of the Vulnerable Software and Affected Versions: WP Shortcodes Plugin — Shortcodes Ultimate versions prior to 7.4.3 Description: The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is susceptible to Stored Cross-Site Scripting through the plugin’s shortcodes. Insufficient...

PT-2025-30228 · WordPress +1 · Wordpress +1

Name of the Vulnerable Software and Affected Versions: WordPress versions 3.5 through 6.8.2 Description: WordPress versions 3.5 through 6.8.2 are susceptible to a flaw that allows remote attackers to determine the titles of private and draft posts through pingback.ping XML-RPC requests...