CVE-2025-68938

CVE-2025-68938 affects Gitea prior to 1.25.2, where the authorization for deleting releases is mishandled. The issue enables an attacker with minimal privileges to delete project releases, potentially leading to loss of assets and distribution history. Public references indicate the fix is in Git...

Alteryx Server 授权问题漏洞

Alteryx Server is a cloud-hosted or self-hosted application from Alteryx, Inc. It is used to publish, share and execute workflows. An authorization issue vulnerability exists in Alteryx Server that stems from improper authentication in the file /gallery/api/status/, which could lead to a remote...

PT-2025-53891

Name of the Vulnerable Software and Affected Versions Medicalequipment versions n/a through 1.0.9 Description An authorization issue exists in kamleshyadav Medicalequipment medicalequipment, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update...

CVE-2025-15087 youlaitech youlai-mall OrderController.java submitOrderPayment improper authorization

A security vulnerability has been detected in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function submitOrderPayment of the file mall-oms/oms-boot/src/main/java/com/youlai/mall/oms/controller/app/OrderController.java. Such manipulation of the argument orderSn leads to improper...

PT-2025-53266

Name of the Vulnerable Software and Affected Versions Addonify versions prior to and including 2.0.4 Description An authorization issue exists in the Addonify addonify-quick-view component, allowing exploitation of incorrectly configured access control security levels. Recommendations Update...

PT-2025-53265

Name of the Vulnerable Software and Affected Versions Virusdie versions n/a through 1.1.6 Description An authorization issue exists in Virusdie, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Virusdie to a version later than 1.1.6...

PT-2025-53270

Name of the Vulnerable Software and Affected Versions Funnelforms versions prior to 3.9 Description An authorization issue exists in Funnelforms Free that allows exploitation of incorrectly configured access control security levels. Recommendations Update to version 3.9 or later...

PT-2025-53089

Name of the Vulnerable Software and Affected Versions wpstream versions through 4.9.5 Description An authorization issue exists in wpstream WpStream wpstream. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations At the...

PT-2025-53090

Name of the Vulnerable Software and Affected Versions Spiffy Plugins Spiffy Calendar versions through 5.0.7 Description An authorization issue exists in Spiffy Plugins Spiffy Calendar spiffy-calendar, allowing exploitation due to incorrectly configured access control security levels...

WordPress plugin WP Telegram Widget and Join Link 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A security...

PT-2025-53275

Name of the Vulnerable Software and Affected Versions Watu Quiz versions through 3.4.5 Description An authorization issue exists in Watu Quiz that allows exploitation due to incorrectly configured access control security levels. Recommendations Update Watu Quiz to a version later than 3.4.5...

PT-2025-53098

Name of the Vulnerable Software and Affected Versions Sunshine Photo Cart versions through 3.5.7.1 Description An authorization issue exists in Sunshine Photo Cart that allows exploitation of incorrectly configured access control security levels. Recommendations Update Sunshine Photo Cart to a...

PT-2025-53283

Name of the Vulnerable Software and Affected Versions Trustindex Widgets for Social Photo Feed versions through 1.7.7 Description An authorization issue exists in Trustindex Widgets for Social Photo Feed. The issue involves incorrectly configured access control security levels, potentially allowi...

PT-2025-53276

Name of the Vulnerable Software and Affected Versions totalsoft TS Poll versions through 2.5.3 Description An authorization issue exists in totalsoft TS Poll poll-wp due to incorrectly configured access control security levels. This allows for potential exploitation of the system. Recommendations...

PT-2026-1467

Name of the Vulnerable Software and Affected Versions Car Rental Manager versions through 1.0.9 Description An authorization issue exists in Car Rental Manager that allows exploitation due to incorrectly configured access control security levels. Recommendations Update Car Rental Manager to a...

PT-2025-53284

Name of the Vulnerable Software and Affected Versions Bit Assist versions through 1.5.11 Description An authorization issue exists in Bit Apps Bit Assist. The problem involves incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations Update B...

PT-2025-53291

Name of the Vulnerable Software and Affected Versions Marketing Fire Editorial Calendar versions 3.8.8 and earlier Description An authorization issue exists in the Editorial Calendar component of Marketing Fire Editorial Calendar. This allows exploitation of incorrectly configured access control...

PT-2025-53274

Name of the Vulnerable Software and Affected Versions Gora Tech Cooked versions through 1.11.2 Description An authorization issue exists in Gora Tech Cooked, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Gora Tech Cooked to a version...

PT-2025-53883

Name of the Vulnerable Software and Affected Versions XforWooCommerce Product Loops for WooCommerce versions through 2.1.2 Description An authorization issue exists in XforWooCommerce Product Loops for WooCommerce. The issue involves incorrectly configured access control security levels,...

PT-2025-53882

Name of the Vulnerable Software and Affected Versions XforWooCommerce Share, Print and PDF Products for WooCommerce versions through 3.1.2 Description The software contains a missing authorization issue due to incorrectly configured access control security levels. This allows for potential...