PT-2025-17827 · Devignstudiosltd · Devignstudiosltd Covid-19 (Coronavirus) Update Your Customers

Name of the Vulnerable Software and Affected Versions: devignstudiosltd COVID-19 Coronavirus Update Your Customers versions 1.5.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Store...

PT-2025-17765 · Unknown · Scss-Library

Name of the Vulnerable Software and Affected Versions: SCSS-Library versions 0.4.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. Recommendations: For SCSS-Library versions 0.4.1 and earlier, as a temporary...

PT-2025-17815 · Andrey Mikhalchuk · 360 View

Name of the Vulnerable Software and Affected Versions: Andrey Mikhalchuk 360 View versions 1.1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject...

PT-2025-17704 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.11.x through 9.11.10 Mattermost versions 10.4.x through 10.4.2 Mattermost versions 10.5.x through 10.5.0 Description: The issue concerns the improper validation of permissions for the API endpoint...

PT-2025-17758 · Unknown · Ghozylab Popup Builder

Name of the Vulnerable Software and Affected Versions: GhozyLab Popup Builder versions 1.1.35 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File...

PT-2025-17819 · Unknown · All In One Time Clock Lite

Name of the Vulnerable Software and Affected Versions: All in One Time Clock Lite versions 1.3.324 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For All in One Time Clock Lite versions 1.3.324 and...

PT-2025-17787 · Elementor · The Pack Elementor Addons

Name of the Vulnerable Software and Affected Versions: The Pack Elementor addons versions n/a through 2.1.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in The Pack Elementor addons...

PT-2025-17716

Name of the Vulnerable Software and Affected Versions Flynax Bridge plugin for WordPress versions up to and including 2.2.0 Description The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover. This issue arises because the plugin does not properly validat...

PT-2025-17749 · Cedcommerce · Cedcommerce Product Lister For Ebay

Name of the Vulnerable Software and Affected Versions: cedcommerce Product Lister for eBay versions n/a through 2.0.9 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Loca...

PT-2025-17781 · John Weissberg · John Weissberg Print Science Designer

Name of the Vulnerable Software and Affected Versions: John Weissberg Print Science Designer versions 1.3.155 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in John Weissberg Print Science Designer. Recommendations: For versions 1.3.15...

PT-2025-17803 · Unknown · Oniswap Mini Twitter Feed

Name of the Vulnerable Software and Affected Versions: oniswap Mini twitter feed versions n/a through 3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS in the oniswap Mini twitter feed...

PT-2025-17762

Name of the Vulnerable Software and Affected Versions Seriously Simple Podcasting versions prior to 3.9.0 Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means an attacker can inject malicious...

PT-2025-17791 · WordPress · Wp Customize Login Page

Name of the Vulnerable Software and Affected Versions: WP Customize Login Page versions 1.6.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-17829 · Msmitley · Wp Cookie Consent

Name of the Vulnerable Software and Affected Versions: msmitley WP Cookie Consent versions 1.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS attacks. This means that an attacker can inject malicious script...

PT-2025-17681 · Westermo · Weos

Name of the Vulnerable Software and Affected Versions: Westermo WeOS versions 5 through 5.23.0 Description: The issue allows for a reboot via a malformed ESP packet. Recommendations: For Westermo WeOS versions 5 through 5.23.0, update to a version later than 5.23.0 to resolve the issue...

PT-2025-17792 · Unknown · Metaloha Dropdown Content

Name of the Vulnerable Software and Affected Versions: metaloha Dropdown Content versions n/a through 1.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS in metaloha Dropdown Content...

PT-2025-17689

Name of the Vulnerable Software and Affected Versions Category Posts Widget WordPress plugin versions prior to 4.9.20 Description The issue concerns the Category Posts Widget WordPress plugin, which does not properly sanitise and escape some of its settings. This could allow high-privilege users,...

PT-2025-17784 · Send From · Send From

Name of the Vulnerable Software and Affected Versions: Benjamin Buddle Send From versions n/a through 2.2 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject...

PT-2025-17764 · Unknown · Yash Binani Time Based Greeting

Name of the Vulnerable Software and Affected Versions: Yash Binani Time Based Greeting versions 2.2.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For Yash Binani Time Based Greeting versions 2.2.2 and earlier, upda...

PT-2025-17771 · Unknown · Fable Extra

Name of the Vulnerable Software and Affected Versions: Fable Extra versions 1.0.0 through 1.0.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacker could...