54 matches found
PT-2026-46358
Unauthenticated Local File Inclusion in Top Dog = 1.0.5 versions...
PT-2026-46334
Unauthenticated Local File Inclusion in Ingenioso = 1.14.0 versions...
PT-2026-46335
Unauthenticated Local File Inclusion in CopyPress = 1.4.5 versions...
PT-2026-46374
Unauthenticated Local File Inclusion in Orpheus = 1.3 versions...
PT-2026-46377
Unauthenticated Local File Inclusion in Etude = 1.6 versions...
PT-2026-46387
Name of the Vulnerable Software and Affected Versions WP Meta Sort Posts versions prior to 1.0 Description The WP Meta Sort Posts plugin for WordPress is subject to Cross-Site Request Forgery CSRF, a type of attack where an unauthorized user tricks a victim into performing actions they did not...
PT-2026-46356
Unauthenticated Local File Inclusion in Putter = 1.17 versions...
PT-2026-46320
Name of the Vulnerable Software and Affected Versions Geya versions prior to 1.16 Description An unauthenticated Local File Inclusion LFI exists, which allows an attacker to include and read local files on the server without requiring authentication. Recommendations Update to a version later than...
PT-2026-46321
Name of the Vulnerable Software and Affected Versions Qreatix versions prior to 1.9.5 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the victim's browser without requiring authentication. Recommendations Update to a version newer than 1.9.4...
PT-2026-46322
Name of the Vulnerable Software and Affected Versions Modernee versions prior to 1.6.1 Description An unauthenticated Local File Inclusion LFI exists, which allows an attacker to include and read files from the local file system without requiring authentication. Recommendations Update to a versio...
PT-2026-46325
Name of the Vulnerable Software and Affected Versions Hot Coffee versions prior to 1.8 Description An unauthenticated PHP Object Injection issue exists. PHP Object Injection occurs when an application unserialize user-supplied input without proper validation, potentially allowing an attacker to...
PT-2026-46327
Name of the Vulnerable Software and Affected Versions AirSupply versions prior to 2.0.1 Description An unauthenticated Local File Inclusion LFI exists, which allows an attacker to read files from the local file system without requiring authentication. Recommendations Update to a version newer tha...
PT-2026-46329
Name of the Vulnerable Software and Affected Versions Planty versions prior to 1.14.1 Description An unauthenticated Local File Inclusion allows an attacker to read files from the local file system without requiring authentication. Recommendations Update to a version newer than 1.14.0...