PT-2025-29763 · WordPress · Wp Hide Post

Name of the Vulnerable Software and Affected Versions: xfinitysoft WP Post Hide versions n/a through 1.0.9 Description: A Cross-Site Request Forgery CSRF issue exists in xfinitysoft WP Post Hide, allowing attackers to perform actions on behalf of an authenticated user. Recommendations: Update...

PT-2025-29726 · WordPress · Stop/Block Bots Plugin Anti Bots

Name of the Vulnerable Software and Affected Versions: Stop and Block bots plugin Anti bots versions n/a through 1.48 Description: The Stop and Block bots plugin Anti bots contains a missing authorization flaw. This allows access to functionality that is not properly restricted by Access Control...

PT-2025-29826

Name of the Vulnerable Software and Affected Versions Icinga DB Web versions 1.2.0 through 1.2.1 Description Icinga DB Web, a graphical interface for Icinga monitoring, allows users with access to Icinga Dependency Views to view hosts and services they are not authorized to access on the dependen...

PT-2025-29859 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: Adobe Experience Manager is susceptible to a DOM-based Cross-Site Scripting XSS issue. A low privileged attacker could exploit this issue by manipulating the DOM environment to...

PT-2025-29738 · Crocoblock · Jetpopup

Name of the Vulnerable Software and Affected Versions: Crocoblock JetPopup versions through 2.0.15 Description: The software contains a DOM-Based Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for potential malicious code execution...

PT-2025-29692 · WordPress · Events Manager – Calendar

Name of the Vulnerable Software and Affected Versions: WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce versions up to and including 3.1.49 Description: The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress contai...

PT-2025-29836 · Meta Inf Kft. · Email This Issue

Name of the Vulnerable Software and Affected Versions: META-INF Kft. Email This Issue Data Center versions prior to 9.13.0-GA Description: A cross-site scripting XSS issue exists in META-INF Kft. Email This Issue Data Center. Attackers can execute arbitrary web scripts or HTML by injecting a...

PT-2025-29765 · Quanticalabs · Quanticalabs Cost Calculator

Name of the Vulnerable Software and Affected Versions: QuanticaLabs Cost Calculator versions through 7.4 Description: A missing authorization issue exists in QuanticaLabs Cost Calculator due to incorrectly configured access control security levels. Recommendations: Versions prior to 7.4 should be...

Oracle MySQL Server 8.0.0 - 8.0.25 Security Update (cpujul2025) - Linux

Oracle MySQL Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2025-29549 · Winaxe · Winaxe Ftp Client

Name of the Vulnerable Software and Affected Versions: WinaXe FTP Client version 7.7 Description: A buffer overflow exists in the FTP banner parsing functionality within the WCMDPA10.dll component. When the client connects to a remote FTP server and receives an overly long '220 Server Ready'...

PT-2025-29642 · Oracle +1 · Mysql Server

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 9.0.0 through 9.1.0 Description: A vulnerability exists in the Oracle MySQL Server component: Server: Optimizer. This issue allows a high-privileged attacker with network access via multiple protocols to compromise MySQL...

PT-2025-29576 · NetGear · Netgear Xr300

Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.38 10.3.30 Description: A stack-based buffer overflow exists in the HTTPD service through the usb device.cgi endpoint when processing POST requests containing the usb folder parameter. Recommendations: Update to a...

PT-2025-29536

Name of the Vulnerable Software and Affected Versions Alone – Charity Multipurpose Non-profit WordPress Theme versions 7.8.3 and earlier Description The Alone WordPress theme contains a critical vulnerability that allows unauthenticated attackers to upload malicious files, potentially leading to...

PT-2025-29685

Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.18 GitHub Enterprise Server versions 3.14.15 GitHub Enterprise Server versions 3.15.10 GitHub Enterprise Server versions 3.16.6 GitHub Enterprise Server versions 3.17.3 Description An incorrect...

PT-2025-29573 · Dassault Systèmes · Solidworks Edrawings +1

Name of the Vulnerable Software and Affected Versions: SOLIDWORKS eDrawings versions prior to SOLIDWORKS Desktop 2025 Description: A use of uninitialized variable issue exists in the JT file reading procedure. This could allow an attacker to execute arbitrary code when opening a specially crafted...

PT-2025-29535

Name of the Vulnerable Software and Affected Versions Alone – Charity Multipurpose Non-profit WordPress Theme versions up to and including 7.8.3 Description The Alone – Charity Multipurpose Non-profit WordPress Theme is vulnerable to arbitrary file deletion due to insufficient file path validatio...

PT-2025-29545 · Wepresent · Wepresent Wipg-1000

Name of the Vulnerable Software and Affected Versions: WePresent WiPG-1000 versions prior to 2.2.3.0 Description: An unauthenticated command injection issue exists due to improper input handling in the /cgi-bin/rdfs.cgi endpoint. The Client parameter is not sanitized before being passed to a syst...

PT-2025-29686

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.1.1551 Description Vim, an open-source command-line text editor, contains a path traversal issue within its zip.vim plugin. This issue allows overwriting of arbitrary files when opening specially crafted zip archives...

PT-2025-29656 · Oracle +1 · Mysql Server

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 9.0.0 through 9.3.0 Description: A vulnerability exists in the MySQL Server product of Oracle MySQL component: Server: Security: LDAP Auth. This difficult-to-exploit issue allows a high-privileged attacker with network...

PT-2025-29618

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u451 and 8u451-perf Description An issue exists in the Oracle Java SE Install component that allows a low-privileged attacker with logon access to the infrastructure where Oracle Java SE executes to compromise the...