PT-2025-27083 · WordPress · Wp Smartpay

Name of the Vulnerable Software and Affected Versions: WP SmartPay versions 2.7.13 and earlier Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel, allowing authentication abuse. Recommendations: For WP SmartPay versions 2.7.13 and earlier, update to a...

PT-2025-27244 · Imagination Technologies · Graphics Ddk

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-27250 · Unknown · Tabberneue

Name of the Vulnerable Software and Affected Versions: TabberNeue versions 3.0.0 through 3.1.0 Description: The issue allows any user to insert arbitrary HTML into the DOM by inserting a payload into any allowed attribute of the tag, posing a significant security risk to user data. Recommendation...

PT-2025-27265 · Marvell · Marvell Qconvergeconsole

Name of the Vulnerable Software and Affected Versions: Marvell QConvergeConsole affected versions not specified Description: The issue is related to a directory traversal information disclosure vulnerability in the getFileUploadBytes function. This allows for potential information disclosure. The...

PT-2025-27173 · Unknown · Edwardbock Cron Logger

Name of the Vulnerable Software and Affected Versions: EdwardBock Cron Logger versions 1.3.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For EdwardBock Cron...

PT-2025-27097 · Themeton · Themeton Seven Stars

Name of the Vulnerable Software and Affected Versions: themeton Seven Stars versions 1.4.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-27177 · WordPress · Blend Media Wordpress Cta

Name of the Vulnerable Software and Affected Versions: Blend Media WordPress CTA versions 1.6.9 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Blend Media WordPress CTA, allowing unauthorized requests. Recommendations: For Blend Media WordPress CTA versions 1.6.9 and...

PT-2025-27056 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A denial of service issue has been identified. No further details are available regarding the estimated number of potentially affected devices or real-world incidents. Recommendations: At th...

PT-2025-27196 · Unknown · Morten Dalgaard Johansen Dashboard Widget Sidebar

Name of the Vulnerable Software and Affected Versions: Morten Dalgaard Johansen Dashboard Widget Sidebar versions 1.2.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels...

PT-2025-27270 · Marvell · Marvell Qconvergeconsole

Name of the Vulnerable Software and Affected Versions: Marvell QConvergeConsole affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole. The specific flaw exists within the implementation of th...

PT-2025-27084 · Faster Themes · Fasterthemes Fastbook

Name of the Vulnerable Software and Affected Versions: FasterThemes FastBook versions 1.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inje...

PT-2025-27155 · Unknown · Quantumcloud Chatbot

Name of the Vulnerable Software and Affected Versions: QuantumCloud ChatBot versions n/a through 6.7.3 Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For versions...

PT-2025-27090 · Xtraffic · Wp-Optimize

Name of the Vulnerable Software and Affected Versions: WP Optimize By xTraffic versions through 5.1.6 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions through 5.1.6, update to a version later than 5.1.6 to resolve...

PT-2025-27126 · Designthemes · Designthemes Lms

Name of the Vulnerable Software and Affected Versions: designthemes LMS versions n/a through 9.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inject...

PT-2025-27165 · Wow Company · Hover Effects

Name of the Vulnerable Software and Affected Versions: Wow-Company Hover Effects versions n/a through 2.1.2 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-27217 · Unknown · Raise The Money

Name of the Vulnerable Software and Affected Versions: Raise The Money versions n/a through 5.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting'. Specifically, it is a DOM-Based XSS vulnerability, which allows...

PT-2025-27219 · Unknown · Pre-Publish Checklist

Name of the Vulnerable Software and Affected Versions: Pre-Publish Post Checklist versions 3.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions 3.1 a...

PT-2025-27275 · Marvell · Marvell Qconvergeconsole

Name of the Vulnerable Software and Affected Versions: Marvell QConvergeConsole affected versions not specified Description: The issue is related to a directory traversal information disclosure problem in the getDriverTmpPath function. This allows for the potential disclosure of sensitive...

PT-2025-27089 · Unknown · Evangelische Termine

Name of the Vulnerable Software and Affected Versions: Evangelische Termine versions n/a through 3.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

PT-2025-28940 · Realtek · Rtl8762E Sdk +1

Name of the Vulnerable Software and Affected Versions: Realtek RTL8762EKF-EVB RTL8762E SDK version 1.4.0 Description: The Realtek RTL8762EKF-EVB RTL8762E SDK does not perform adequate permission checks on critical fields within Bluetooth Low Energy BLE data packets. This allows attackers to cause...