PT-2025-20202 · Woocommerce · Elex Product Feed For Woocommerce

Name of the Vulnerable Software and Affected Versions: ELEX Product Feed for WooCommerce versions 3.1.2 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

Debian dla-4154 : libmariadb-dev - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4154 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4154-1 [email protected]...

PT-2025-20143 · Unknown · Robo Gallery

Name of the Vulnerable Software and Affected Versions: Robo Gallery versions through 5.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject maliciou...

PT-2025-20130 · Unknown · Contextual Related Posts

Name of the Vulnerable Software and Affected Versions: Ajay Contextual Related Posts versions n/a through 4.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an...

PT-2025-20201 · Unknown · Supertext Translation/Proofreading

Name of the Vulnerable Software and Affected Versions: Supertext Translation and Proofreading versions n/a through 4.25 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions n/a through 4.25, update to a version that contai...

PT-2025-20155 · Elementor · Simple Calendar For Elementor

Name of the Vulnerable Software and Affected Versions: Simple calendar for Elementor versions 1.6.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. Recommendations: For versions 1.6.5 and earlier, update to a...

PT-2025-20152 · Woocommerce · Pdf Invoices For Woocommerce + Drag/Drop Template Builder

Name of the Vulnerable Software and Affected Versions: PDF Invoices for WooCommerce + Drag and Drop Template Builder versions through 5.3.8 Description: The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL command. This allow...

PT-2025-20160 · Sendpulse · Sendpulse Email Marketing Newsletter

Name of the Vulnerable Software and Affected Versions: SendPulse Email Marketing Newsletter versions n/a through 2.1.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

PT-2025-20198 · Unknown · Webinarpress

Name of the Vulnerable Software and Affected Versions: WebinarPress versions 1.33.27 and earlier Description: A Server-Side Request Forgery SSRF issue affects the software, allowing for Server Side Request Forgery. Recommendations: For versions 1.33.27 and earlier, update to a version that contai...

PT-2025-20290 · Opentext · Opentext Operations Bridge Manager

Name of the Vulnerable Software and Affected Versions: OpenText Operations Bridge Manager versions 24.2 through 24.4 Description: The issue allows authenticated users to change their password without providing their old password. Recommendations: For versions 24.2 and 24.4, update to a version th...

PT-2025-20204 · Unknown · Otwthemes Sidebar Manager Light

Name of the Vulnerable Software and Affected Versions: OTWthemes Sidebar Manager Light versions 1.18 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions 1.18 and...

PT-2025-20197 · Woocommerce · Awin – Advertiser Tracking For Woocommerce

Name of the Vulnerable Software and Affected Versions: Awin – Advertiser Tracking for WooCommerce versions n/a through 2.0.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions n/a through 2.0.0, update ...

PT-2025-20180 · Unknown · Easy Connect

Name of the Vulnerable Software and Affected Versions: EasyMe Connect versions 3.0.3 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions 3.0.3 and earlier, update to...

PT-2025-20146 · Unknown · Karim42 Quran Multilanguage Text & Audio

Name of the Vulnerable Software and Affected Versions: karim42 Quran multilanguage Text & Audio versions n/a through 2.3.23 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

PT-2025-20211 · Wpbakery · Wpbakery Visual Composer Whmcs Elements

Name of the Vulnerable Software and Affected Versions: WPBakery Visual Composer WHMCS Elements versions 1.0.4.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means tha...

PT-2025-20229 · Unknown · Advanced File Manager

Name of the Vulnerable Software and Affected Versions: Advanced File Manager versions through 5.3.1 Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For versions...

PT-2025-20129 · Woocommerce · Product Time Countdown For Woocommerce

Name of the Vulnerable Software and Affected Versions: Product Time Countdown for WooCommerce versions 1.6.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

Do Not Install the X Window System

X Window System X for short provides a GUI for users to log in and perform operations in Linux. Generally, servers do not require a GUI. Administrators can configure and modify a server through the CLI. X SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a...

PT-2025-20145 · Seznam · Seznam Webmaster

Name of the Vulnerable Software and Affected Versions: Seznam Webmaster versions 1.4.7 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. Recommendations: For versions 1.4.7 and earlier, update to a versio...

CVE-2025-30165 Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration

vLLM is an inference and serving engine for large language models. In a multi-node vLLM deployment using the V0 engine, vLLM uses ZeroMQ for some multi-node communication purposes. The secondary vLLM hosts open a SUB ZeroMQ socket and connect to an XPUB socket on the primary vLLM host. When data ...