CVE-2025-31338 Wisdom Master Pro - Missing Authorization

A missing authorization vulnerability in the retrieve teacher Information function of Wisdom Master Pro versions 5.0 through 5.2 allows remote attackers to obtain partial user data by accessing the API functionality...

PT-2025-17145 · Woocommerce · Crowdfunding For Woocommerce

Name of the Vulnerable Software and Affected Versions: Crowdfunding for WooCommerce versions 3.1.12 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means an attacker can...

PT-2025-17047 · Radiustheme · Radiustheme Classified Listing

Name of the Vulnerable Software and Affected Versions: RadiusTheme Classified Listing versions n/a through 4.0.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

PT-2025-17036 · Unknown · Bitsstech Shipment Tracker For Woocommerce

Name of the Vulnerable Software and Affected Versions: bitsstech Shipment Tracker for Woocommerce versions 1.4.23 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means an...

PT-2025-17070 · Woocommerce · 17Track For Woocommerce

Name of the Vulnerable Software and Affected Versions: 17TRACK for WooCommerce versions 1.2.10 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an attacker can...

PT-2025-17040 · Unknown · Beacon Lead Magnets/Lead Capture

Name of the Vulnerable Software and Affected Versions: Beacon Lead Magnets and Lead Capture versions 1.5.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This means a...

PT-2025-17152 · Unknown · Wecantrack Affiliate Links Lite

Name of the Vulnerable Software and Affected Versions: wecantrack Affiliate Links Lite versions 3.1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an attacke...

PT-2025-17171 · Unknown · Ashish Ajani Contact Form Vcard Generator

Name of the Vulnerable Software and Affected Versions: Ashish Ajani Contact Form vCard Generator versions n/a through 2.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means th...

PT-2025-17192 · Unknown · Arigato Autoresponder/Newsletter

Name of the Vulnerable Software and Affected Versions: Arigato Autoresponder and Newsletter versions n/a through 2.7.2.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means tha...

PT-2025-17157 · Unknown · Serped.Net

Name of the Vulnerable Software and Affected Versions: SERPed.net versions n/a through 4.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an attacker can inject malicious...

PT-2025-17090 · Unknown · Revamp Crm For Woocommerce

Name of the Vulnerable Software and Affected Versions: Revamp CRM for WooCommerce versions 1.1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This means an attacker...

PT-2025-17029 · Unknown · Debounce Email Validator

Name of the Vulnerable Software and Affected Versions: DeBounce Email Validator versions n/a through 5.6.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker...

PT-2025-17111 · Unknown · Hamburger Icon Menu Lite

Name of the Vulnerable Software and Affected Versions: Hamburger Icon Menu Lite versions 1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker ca...

PT-2025-17106 · Woocommerce · Dn Shipping By Weight For Woocommerce

Name of the Vulnerable Software and Affected Versions: DN Shipping by Weight for WooCommerce versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an...

PT-2025-17063 · WordPress · Wp Video Posts

Name of the Vulnerable Software and Affected Versions: WP Video Posts versions 3.5.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inject...

PT-2025-17102 · Woocommerce · Wallet System For Woocommerce

Name of the Vulnerable Software and Affected Versions: Wallet System for WooCommerce versions n/a through 2.6.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

PT-2025-17069 · Woocommerce · Bappa Mal Qr Code For Woocommerce

Name of the Vulnerable Software and Affected Versions: Bappa Mal QR Code for WooCommerce versions 1.2.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an...

PT-2025-16968 · Vicente Ruiz Gálvez · Vr-Frases

Name of the Vulnerable Software and Affected Versions: Vicente Ruiz Gálvez VR-Frases versions 3.0.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means that an attacker...

PT-2025-17143 · Pootlepress · Pootlepress Mobile Pages

Name of the Vulnerable Software and Affected Versions: pootlepress Mobile Pages versions 1.0.0 through 1.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacke...

PT-2025-17068 · Unknown · Ivan82 User List

Name of the Vulnerable Software and Affected Versions: ivan82 User List versions n/a through 1.5.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for Reflected XSS. This is a type of Cross-site Scripting attack where an attacker can...