PT-2025-29884 · Idera · Idera Up.Time Monitoring Station

Name of the Vulnerable Software and Affected Versions: Idera Up.Time Monitoring Station versions up to and including 7.2 Description: An unauthenticated arbitrary file upload issue exists. The wizards/post2file.php script accepts arbitrary POST parameters, allowing attackers to upload crafted PHP...

PT-2025-29810 · Unknown · Codesolz Ultimate Push Notifications

Name of the Vulnerable Software and Affected Versions: CodeSolz Ultimate Push Notifications versions through 1.1.9 Description: The software contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations: Update CodeSolz Ultimate Push...

PT-2025-29826

Name of the Vulnerable Software and Affected Versions Icinga DB Web versions 1.2.0 through 1.2.1 Description Icinga DB Web, a graphical interface for Icinga monitoring, allows users with access to Icinga Dependency Views to view hosts and services they are not authorized to access on the dependen...

PT-2025-29741 · Houzez · Houzez

Name of the Vulnerable Software and Affected Versions: Houzez versions prior to 4.0.5 Description: A missing authorization issue exists in Houzez, allowing exploitation of incorrectly configured access control security levels. Recommendations: Update Houzez to version 4.0.5 or later...

Oracle MySQL Server 8.0.0 - 8.0.25 Security Update (cpujul2025) - Linux

Oracle MySQL Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2025-29726 · WordPress · Stop/Block Bots Plugin Anti Bots

Name of the Vulnerable Software and Affected Versions: Stop and Block bots plugin Anti bots versions n/a through 1.48 Description: The Stop and Block bots plugin Anti bots contains a missing authorization flaw. This allows access to functionality that is not properly restricted by Access Control...

PT-2025-29795 · WordPress · Mojoomla Wpgym

Name of the Vulnerable Software and Affected Versions: mojomla WPGYM versions through 65.0 Description: The software is susceptible to a SQL Injection issue due to improper neutralization of special elements used in an SQL command. Recommendations: Update to a version later than 65.0...

PT-2025-29707 · WordPress · Affiliate Reviews

Name of the Vulnerable Software and Affected Versions: Affiliate Reviews plugin for WordPress versions up to and including 1.0.6 Description: The Affiliate Reviews plugin for WordPress is susceptible to Stored Cross-Site Scripting through the numColumns parameter. Insufficient input sanitization...

PT-2025-29775 · WordPress · Wp-Businessdirectory

Name of the Vulnerable Software and Affected Versions: WP-BusinessDirectory versions through 3.1.3 Description: The WordPress Business Directory Plugins WP-BusinessDirectory contains a SQL injection flaw. The flaw is due to improper neutralization of special elements used in an SQL command. This...

PT-2025-29788 · WordPress · Wpfactory Product Xml Feed Manager For Woocommerce

Name of the Vulnerable Software and Affected Versions: WPFactory Product XML Feed Manager for WooCommerce versions through 2.9.2 Description: The software contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations: Update WPFactory Product...

PT-2025-29786 · Telegram · Site Chat On Telegram

Name of the Vulnerable Software and Affected Versions: Site Chat on Telegram versions n/a through 1.0.4 Description: A deserialization of untrusted data issue exists in Site Chat on Telegram, potentially allowing object injection. Recommendations: Update Site Chat on Telegram to a version later...

PT-2025-29836 · Meta Inf Kft. · Email This Issue

Name of the Vulnerable Software and Affected Versions: META-INF Kft. Email This Issue Data Center versions prior to 9.13.0-GA Description: A cross-site scripting XSS issue exists in META-INF Kft. Email This Issue Data Center. Attackers can execute arbitrary web scripts or HTML by injecting a...

PT-2025-29765 · Quanticalabs · Quanticalabs Cost Calculator

Name of the Vulnerable Software and Affected Versions: QuanticaLabs Cost Calculator versions through 7.4 Description: A missing authorization issue exists in QuanticaLabs Cost Calculator due to incorrectly configured access control security levels. Recommendations: Versions prior to 7.4 should be...

PT-2025-29889 · Achat · Achat

Name of the Vulnerable Software and Affected Versions: Achat version 0.150 Description: A stack-based buffer overflow exists in the default configuration. By sending a specially crafted message to the UDP port 9256, an attacker can overwrite the structured exception handler SEH due to insufficien...

PT-2025-29753 · WordPress · Wpadverts

Name of the Vulnerable Software and Affected Versions: WPAdverts versions through 2.2.5 Description: The software contains a DOM-Based Cross-site Scripting issue due to improper neutralization of input during web page generation. Recommendations: Update WPAdverts to a version later than 2.2.5...

PT-2025-29787 · Gt3Themes · Listingeasy

Name of the Vulnerable Software and Affected Versions: GT3themes ListingEasy versions through 1.9.2 Description: The software contains a Reflected Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Update GT3themes ListingEasy to a...

PT-2025-29806 · Woocommerce · Nc Wishlist For Woocommerce

Name of the Vulnerable Software and Affected Versions: Wishlist for WooCommerce versions n/a through 3.2.3 Description: The software contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations: Update Wishlist for WooCommerce to a version...

PT-2025-29785 · Torod · Torod

Name of the Vulnerable Software and Affected Versions: Torod versions n/a through 1.9 Description: Torod is susceptible to a SQL injection issue. The vulnerability stems from improper neutralization of special elements within SQL commands. Recommendations: Update Torod to a version later than 1.9...

PT-2025-29800 · Unknown · Contest Gallery

Name of the Vulnerable Software and Affected Versions: Contest Gallery versions through 26.0.6 Description: Contest Gallery is susceptible to a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks. Recommendations:...

PT-2025-29859 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: Adobe Experience Manager is susceptible to a DOM-based Cross-Site Scripting XSS issue. A low privileged attacker could exploit this issue by manipulating the DOM environment to...