5188 matches found
PT-2025-29784 · WordPress · Medical Prescription Attachment Plugin For Woocommerce
Name of the Vulnerable Software and Affected Versions: Medical Prescription Attachment Plugin for WooCommerce versions n/a through 1.2.3 Description: The Medical Prescription Attachment Plugin for WooCommerce contains a flaw that permits the upload of arbitrary files, potentially including web...
PT-2025-29749 · Creativemindssolutions · Cm Pop-Up Banners
Name of the Vulnerable Software and Affected Versions: CM Pop-Up banners versions n/a through 1.8.4 Description: A missing authorization issue exists in CreativeMindsSolutions CM Pop-Up banners due to incorrectly configured access control security levels. Recommendations: Update CM Pop-Up banners...
PT-2025-29884 · Idera · Idera Up.Time Monitoring Station
Name of the Vulnerable Software and Affected Versions: Idera Up.Time Monitoring Station versions up to and including 7.2 Description: An unauthenticated arbitrary file upload issue exists. The wizards/post2file.php script accepts arbitrary POST parameters, allowing attackers to upload crafted PHP...
PT-2025-29812 · Unknown · Cmsminds Pay With Contact Form 7
Name of the Vulnerable Software and Affected Versions: cmsMinds Pay with Contact Form 7 versions through 1.0.4 Description: The software contains a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of malicio...
PT-2025-29818 · Unknown · Pakkemx Pakke Envíos
Name of the Vulnerable Software and Affected Versions: pakkemx Pakke Envíos versions through 1.0.2 Description: The software contains a SQL Injection issue due to improper neutralization of special elements used in an SQL command. This allows for potential SQL Injection attacks. Recommendations:...
PT-2025-29729 · Elementor +1 · Elementor +1
Name of the Vulnerable Software and Affected Versions: hashthemes Easy Elementor Addons versions through 2.2.5 Description: The software contains a cross-site scripting issue due to improper neutralization of input during web page generation. This allows for stored cross-site scripting attacks...
PT-2025-29730 · Yaycommerce · Yaycommerce Yayextra
Name of the Vulnerable Software and Affected Versions: YayCommerce YayExtra versions through 1.5.5 Description: YayCommerce YayExtra is susceptible to a SQL injection flaw due to improper neutralization of special elements within SQL commands. This allows for potential manipulation of database...
PT-2025-29706 · WordPress · Brandfolder
Name of the Vulnerable Software and Affected Versions: Brandfolder plugin for WordPress versions prior to 5.0.20 Description: The Brandfolder plugin for WordPress is susceptible to Stored Cross-Site Scripting through the id parameter. Insufficient input sanitization and output escaping allow...
PT-2025-29874 · Hewlett Packard · Hpe Autopass License Server
Name of the Vulnerable Software and Affected Versions: HPE AutoPass License Server APLS versions prior to 9.18 Description: An authentication bypass and information disclosure issue exists in HPE AutoPass License Server APLS. This allows unauthorized access and potential exposure of sensitive...
PT-2025-29799 · Unknown · Infility Global
Name of the Vulnerable Software and Affected Versions: Infility Global versions through 2.13.4 Description: Infility Global is susceptible to a Reflected Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Update Infility Global to a...
PT-2025-29794 · WordPress · Invico
Name of the Vulnerable Software and Affected Versions: designthemes Invico - WordPress Consulting Business Theme versions through 1.9 Description: The software contains a cross-site scripting issue due to improper neutralization of input during web page generation. This allows for reflected...
PT-2025-29756 · WordPress · Blockswp Theme Builder For Elementor
Name of the Vulnerable Software and Affected Versions: BlocksWP Theme Builder For Elementor versions through 1.2.3 Description: The BlocksWP Theme Builder For Elementor software contains a Cross-Site Request Forgery CSRF issue. This allows for the execution of unintended actions on behalf of an...
PT-2025-29747 · Unknown · Contact Form 7
Name of the Vulnerable Software and Affected Versions: HT Contact Form 7 versions n/a through 2.0.0 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue. This allows for PHP Local File Inclusion...
PT-2025-29860 · Adobe · Experience Manager
Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: Adobe Experience Manager is susceptible to a DOM-based Cross-Site Scripting XSS issue. A low privileged attacker could exploit this issue by manipulating the DOM environment to...
PT-2025-29758 · Unknown · Webba Booking
Name of the Vulnerable Software and Affected Versions: Webba Booking versions through 5.1.20 Description: A Cross-Site Request Forgery CSRF issue exists in Webba Booking. This allows attackers to potentially perform actions on behalf of authenticated users without their knowledge. Recommendations...
PT-2025-29776 · Awethemes · Hillter
Name of the Vulnerable Software and Affected Versions: awethemes Hillter versions through 3.0.7 Description: The software contains a deserialization of untrusted data flaw that allows for object injection. Recommendations: Update awethemes Hillter to a version later than 3.0.7...
PT-2025-29715 · WordPress · The Master Addons – Elementor Addons
Name of the Vulnerable Software and Affected Versions: Master Addons – Elementor Addons versions prior to 2.0.8.3 Description: The Master Addons – Elementor Addons plugin for WordPress is susceptible to Stored Cross-Site Scripting through the Custom JS extension. Insufficient capability...
PT-2025-29733 · Crocoblock · Jettabs
Name of the Vulnerable Software and Affected Versions: Crocoblock JetTabs versions through 2.2.9 Description: Crocoblock JetTabs is susceptible to a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks...
