PT-2026-94167

Name of the Vulnerable Software and Affected Versions Newsletter WordPress plugin versions prior to 9.3.8 Description The plugin fails to generate its email tracking signing key with sufficient entropy and utilizes an unkeyed hash to sign tracking links. This allows an unauthenticated attacker wh...

CVE-2024-12307: Improper Access Control

A function-level access control vulnerability in Unifiedtransform version 2.0 and potentially earlier versions allows teachers to modify student personal data without proper authorization. The vulnerability exists due to missing access control checks in the student editing functionality. At the...

PT-2018-17955

Name of the Vulnerable Software and Affected Versions Bravo Tejari Procurement Portal affected versions not specified Description A cross-site request forgery CSRF issue exists due to the lack of anti-CSRF tokens, allowing remote authenticated users to hijack the authentication of application use...