PT-2025-4621 · Wpdeveloper · Wpdeveloper Notificationx

Name of the Vulnerable Software and Affected Versions: WPDeveloper NotificationX versions prior to 2.9.5 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can inject...

PT-2023-32440 · WordPress · Welcart E-Commerce

Name of the Vulnerable Software and Affected Versions: Welcart e-Commerce WordPress plugin versions prior to 2.9.5 Description: The issue allows unauthorized users to perform PHP Object Injection when a suitable gadget is present on the blog, due to the plugin unserializing user input from cookie...

Kwoksys Kwok Information Server 代码问题漏洞

Kwoksys Kwok Information Server is an open source IT management system from Kwoksys. A security vulnerability exists in versions prior to Kwoksys Kwok Information Server v2.9.5.SP31. An attacker could exploit this vulnerability to perform server-side request forgery SSRF attacks...