PT-2025-35717

Name of the Vulnerable Software and Affected Versions: Malcure Malware Scanner versions n/a through 16.8 Description: A missing authorization flaw exists in Malcure Malware Scanner, allowing exploitation due to incorrectly configured access control security levels. Recommendations: At the moment,...

PT-2025-35750

Name of the Vulnerable Software and Affected Versions: Frisbii Pay versions through 1.8.2.1 Description: A missing authorization issue exists in Frisbii Pay, allowing exploitation due to incorrectly configured access control security levels. Recommendations: At the moment, there is no information...

PT-2025-35735

Name of the Vulnerable Software and Affected Versions: RadiusTheme Classified Listing versions n/a through 5.0.6 Description: A missing authorization flaw exists in RadiusTheme Classified Listing due to incorrectly configured access control security levels. Recommendations: Update RadiusTheme...

PT-2025-35751

Name of the Vulnerable Software and Affected Versions: FAKTOR VIER F4 Media Taxonomies versions through 1.1.4 Description: A missing authorization issue exists in FAKTOR VIER F4 Media Taxonomies, allowing exploitation due to incorrectly configured access control security levels. Recommendations: ...

PT-2025-35764

Name of the Vulnerable Software and Affected Versions: PeachPay Payments versions n/a through 1.117.4 Description: A missing authorization flaw exists in PeachPay Payments, allowing exploitation of incorrectly configured access control security levels. Recommendations: Update PeachPay Payments to...

PT-2025-35767

Name of the Vulnerable Software and Affected Versions: Ali Khallad Contact Form By Mega Forms versions through 1.6.1 Description: The software contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations: Update Ali Khallad Contact Form By Me...

PT-2025-35729

Name of the Vulnerable Software and Affected Versions: Brizy versions through 2.7.12 Description: Brizy suffers from a missing authorization issue, allowing exploitation of incorrectly configured access control security levels. Recommendations: Update Brizy to a version later than 2.7.12...

PT-2025-35697

Name of the Vulnerable Software and Affected Versions Makeaholic versions through 1.8.5 Description The software contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations Update Makeaholic to a version later than 1.8.5...

CVE-2025-58193

Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Automator: from n/a through = 6.7.0.1...

CVE-2025-54734

Missing Authorization vulnerability in bPlugins B Slider b-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B Slider: from n/a through = 1.1.30...

CVE-2025-54734

Missing Authorization vulnerability in bPlugins B Slider b-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B Slider: from n/a through = 1.1.30...

CVE-2025-53337

Missing Authorization vulnerability in Ashan Perera LifePress lifepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LifePress: from n/a through = 2.1.3...

CVE-2025-53230

Missing Authorization vulnerability in honzat Page Manager for Elementor page-manager-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page Manager for Elementor: from n/a through = 2.0.5...

CVE-2025-49402

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in scriptsbundle Exertio Framework exertio-framework allows Blind SQL Injection.This issue affects Exertio Framework: from n/a through = 1.3.3...

CVE-2025-48348

Incorrect Privilege Assignment vulnerability in chandrashekharsahu Site Offline site-offline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Offline: from n/a through = 1.5.7...

CVE-2025-53230

CVE-2025-53230 affects WordPress Page Manager for Elementor (plugin)

CVE-2025-49402

CVE-2025-49402 corresponds to a SQL Injection in WordPress Exertio Framework up to version 1.3.3. The root cause is improper neutralization of user-controlled input in the framework’s SQL queries, enabling blind SQL injection. Affected software: Exertio Framework (scriptsbundle exertio-framework)

PT-2025-35059

Name of the Vulnerable Software and Affected Versions: LifePress versions through 2.1.3 Description: A missing authorization issue exists in LifePress due to incorrectly configured access control security levels. This allows for potential exploitation. Recommendations: Update LifePress to a versi...

PT-2025-35069

Name of the Vulnerable Software and Affected Versions: Zephyr Project Manager versions through 3.3.201 Description: A missing authorization flaw exists in Dylan James Zephyr Project Manager, allowing exploitation of incorrectly configured access control security levels. Recommendations: At the...

PT-2025-35076

Name of the Vulnerable Software and Affected Versions: bPlugins B Slider versions through 1.1.30 Description: The software contains a missing authorization issue that allows exploiting incorrectly configured access control security levels. Recommendations: At the moment, there is no information...