CVE-2023-49734

An authenticated Gamma user has the ability to create a dashboard and add charts to it, this user would automatically become one of the owners of the charts allowing him to incorrectly have write permissions to these charts.This issue affects Apache Superset: before 2.1.2, from 3.0.0 before 3.0.2...

PT-2026-1749

Name of the Vulnerable Software and Affected Versions Eventin – Event Manager, Events Calendar, Event Tickets and Registrations plugin for WordPress versions up to and including 4.0.51 Description The Eventin plugin for WordPress is susceptible to unauthorized data modification because of a missi...

PT-2026-1726

Name of the Vulnerable Software and Affected Versions The Tooltip plugin for WordPress versions up to and including 1.0.2 Description The Tooltip plugin for WordPress is susceptible to Stored Cross-Site Scripting through the 'the tooltip' shortcode. Insufficient input sanitization and output...

PT-2026-1707

Name of the Vulnerable Software and Affected Versions Shabat Keeper versions up to and including 0.4.4 Description The Shabat Keeper plugin for WordPress is susceptible to Reflected Cross-Site Scripting due to inadequate input sanitization and output escaping. This allows unauthenticated attacker...

PT-2026-1712

Name of the Vulnerable Software and Affected Versions WP Table Builder – Drag & Drop Table Builder plugin for WordPress versions up to and including 2.0.19 Description The WP Table Builder – Drag & Drop Table Builder plugin for WordPress has a flaw where data can be modified without proper...

PT-2026-1684

Name of the Vulnerable Software and Affected Versions WP Cost Estimation versions prior to 9.660 Description The WP Cost Estimation plugin for WordPress is susceptible to a directory traversal issue in versions before 9.660. This flaw resides within the uploadFormFiles function and permits...

PT-2026-1785

Name of the Vulnerable Software and Affected Versions ThemeMove Moody tm-moody versions through 2.7.3 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of...

PT-2026-1736

Name of the Vulnerable Software and Affected Versions sizam REHub Framework versions through 19.9.5 Description A missing authorization issue exists in the REHub Framework. This allows access to functionality that is not properly constrained by Access Control Lists ACLs. Recommendations Update to...

PT-2026-1927

Name of the Vulnerable Software and Affected Versions Pinpoll versions through 4.0.0 Description The software contains a flaw related to improper input handling during web page creation, specifically a Reflected Cross-site Scripting XSS issue. This allows for the injection of malicious scripts in...

PT-2026-1941

Name of the Vulnerable Software and Affected Versions pnpm versions 10.0.0 through 10.25 Description pnpm is a package manager affected by an issue where git-hosted dependencies can execute arbitrary code during the pnpm install process. This bypasses the security feature introduced in version 10...

PT-2026-1649

Name of the Vulnerable Software and Affected Versions ThemeHunk Oneline Lite versions through 6.6 Description An authorization issue exists in ThemeHunk Oneline Lite, stemming from incorrectly configured access control security levels. This allows for unauthorized access. Recommendations Update...

PT-2026-1601

Name of the Vulnerable Software and Affected Versions Responsive Pricing Table plugin for WordPress versions prior to 5.1.13 Description The software is susceptible to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. An authenticated attacker with Author-lev...

PT-2026-1633

Name of the Vulnerable Software and Affected Versions Easy GitHub Gist Shortcodes plugin for WordPress versions prior to 1.0 Description The Easy GitHub Gist Shortcodes plugin for WordPress is susceptible to Stored Cross-Site Scripting through the id parameter of the gist shortcode. Insufficient...

PT-2026-1677

Name of the Vulnerable Software and Affected Versions FaceSentry Access Control System version 6.4.8 Description The FaceSentry Access Control System stores passwords in cleartext within the device’s SQLite database. This allows attackers to access unencrypted credentials directly from the...

PT-2026-2061

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools used for interacting with, manipulating, and applying ICC color management profiles. A division by zero flaw exists in the TIFF Image Reader component in...

PT-2026-1467

Name of the Vulnerable Software and Affected Versions Car Rental Manager versions through 1.0.9 Description An authorization issue exists in Car Rental Manager that allows exploitation due to incorrectly configured access control security levels. Recommendations Update Car Rental Manager to a...

PT-2026-1509

Name of the Vulnerable Software and Affected Versions AA-Team Premium Age Verification / Restriction for WordPress versions through 3.0.2 AA-Team Responsive Coming Soon Landing Page / Holding Page for WordPress versions through 3.0 Description An incorrect privilege assignment exists in AA-Team...

PT-2026-1475

Name of the Vulnerable Software and Affected Versions AffiliateX versions through 1.3.9.3 Description An authorization issue exists in AffiliateX, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update AffiliateX to a version later than 1.3.9.3...

PT-2026-1362

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.1 Description iccDEV is a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain an infinite loop within the CalcProfileID function in the IccProfile.cpp file...

PT-2026-1406

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.1 Description iccDEV is a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a Heap-based Buffer Overflow in the CIccMBB::Validate function, which is...