CVE-2025-68006

Insertion of Sensitive Information Into Sent Data vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Retrieve Embedded Sensitive Data.This issue affects Booking Ultra Pro: from n/a through = 1.1.23...

PT-2026-4050

Name of the Vulnerable Software and Affected Versions Deetronix Booking Ultra Pro versions through 1.1.23 Description A flaw exists in Deetronix Booking Ultra Pro that allows for the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. The affected...

EUVD-2025-11642

Malicious code in bioql PyPI...

EUVD-2025-5409

Malicious code in bioql PyPI...

EUVD-2025-17198

Malicious code in bioql PyPI...

PT-2025-35763

Name of the Vulnerable Software and Affected Versions: Deetronix Booking Ultra Pro versions through 1.1.21 Description: This issue allows for Stored Cross-Site Scripting XSS. The vulnerability is due to improper neutralization of input during web page generation. Recommendations: Update Deetronix...

CVE-2025-30637

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Stored XSS.This issue affects Booking Ultra Pro: from n/a through = 1.1.20...

CVE-2025-30637

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Stored XSS.This issue affects Booking Ultra Pro: from n/a through = 1.1.20...

CVE-2025-30637

CVE-2025-30637 affects Booking Ultra Pro (Booking Ultra Pro Appointments Booking Calendar Plugin). Description: Stored cross-site scripting due to improper neutralization of input during web page generation. Affected versions: Booking Ultra Pro from n/a through 1.1.20. Existence of public referen...

PT-2025-24154 · Deetronix · Deetronix Booking Ultra Pro

Name of the Vulnerable Software and Affected Versions: Deetronix Booking Ultra Pro versions 1.1.20 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...

CVE-2025-27345

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Reflected XSS.This issue affects Booking Ultra Pro: from n/a through = 1.1.19...

CVE-2025-27345

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Reflected XSS.This issue affects Booking Ultra Pro: from n/a through = 1.1.19...

CVE-2025-27345

CVE-2025-27345 is a Reflected XSS in the Deetronix Booking Ultra Pro WordPress plugin, affecting Booking Ultra Pro ≤ 1.1.19. Remediation per PT-2025-17075 is to update to a version later than 1.1.19; no exploitation details are provided in the connected documents.

PT-2025-17075 · Deetronix · Deetronix Booking Ultra Pro

Name of the Vulnerable Software and Affected Versions: Deetronix Booking Ultra Pro versions 1.1.19 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

CVE-2025-26957

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Deetronix Affiliate Coupons affiliate-coupons allows PHP Local File Inclusion.This issue affects Affiliate Coupons: from n/a through = 1.7.3...

CVE-2025-26957

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Deetronix Affiliate Coupons affiliate-coupons allows PHP Local File Inclusion.This issue affects Affiliate Coupons: from n/a through = 1.7.3...

CVE-2025-26957

CVE-2025-26957 affects the WordPress plugin Affiliate Coupons (Affiliate Coupons – The #1 Coupon Display Plugin for Affiliate Marketers). Connected data confirms an Authenticated (Contributor+) Local File Inclusion vulnerability in Affiliate Coupons