PT-2025-17148 · Unknown · Hive Support

Name of the Vulnerable Software and Affected Versions: Hive Support versions 1.2.2 and earlier Description: The issue allows the retrieval of embedded sensitive data. This is due to the insertion of sensitive information into sent data, which can be exploited. Recommendations: For versions 1.2.2...

PT-2025-17055 · Unknown · Bjornw File Icons

Name of the Vulnerable Software and Affected Versions: BjornW File Icons versions n/a through 2.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to injec...

PT-2025-17046 · Unknown · Wp Helper Premium

Name of the Vulnerable Software and Affected Versions: WP Helper Premium versions through 4.6.1 Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions through 4.6.1, update to...

PT-2025-17159 · Unknown · Cart66 Cloud

Name of the Vulnerable Software and Affected Versions: Cart66 Cloud versions 2.3.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an attacker can inject...

PT-2025-17024 · Unknown · Totalcontest Lite

Name of the Vulnerable Software and Affected Versions: TotalContest Lite versions through 2.8.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations: For versions through...

PT-2025-17187 · Dashi · Dashi

Name of the Vulnerable Software and Affected Versions: Dashi versions 3.1.8 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 3.1.8 and earlier, update to a...

PT-2025-17001 · Unknown · Scott Taylor Avatar

Name of the Vulnerable Software and Affected Versions: Scott Taylor Avatar versions 0.1.4 and earlier Description: The issue affects the access control security levels in Scott Taylor Avatar, allowing exploitation through incorrectly configured security levels. This is due to an Authorization...

PT-2025-17172 · Unknown · Nicdark Hotel Booking

Name of the Vulnerable Software and Affected Versions: nicdark Hotel Booking versions n/a through 3.6 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

PT-2025-18341 · NetGear · Netgear Ex6200

Name of the Vulnerable Software and Affected Versions: Netgear EX6200 version 1.0.3.94 Description: A critical vulnerability has been found, affecting the function sub 3C8EC. The manipulation of the argument host leads to a buffer overflow. This issue can be initiated remotely. The vendor was...

PT-2025-17204 · Foxcms · Foxcms

Name of the Vulnerable Software and Affected Versions: FOXCMS versions prior to V1.25 Description: The issue allows for SQL Injection via the title parameter in the /admin/util/Field.php file. Recommendations: For versions prior to V1.25, consider restricting access to the title parameter in the...

PT-2025-16989 · WordPress · Wp Social Bookmarking

Name of the Vulnerable Software and Affected Versions: WP Social Bookmarking versions n/a through 3.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in PResponsive WP Social Bookmarking. Recommendations: For versions n/a through 3.6, update to a...

PT-2025-17007 · Unknown · Rajesh Broken Links Remover

Name of the Vulnerable Software and Affected Versions: Rajesh Broken Links Remover versions 1.2.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions 1.2.2 and earlier, update to a version that fixes this issu...

PT-2025-17181 · Crm Perks · Crm Perks

Name of the Vulnerable Software and Affected Versions: CRM Perks versions 1.1.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. Specifically, it is a Reflected XSS vulnerability, which means that an...

PT-2025-18722 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical vulnerability was found in the SEND Command Handler component of PCMan FTP Server, leading to a buffer overflow. The attack can be launched remotely, and the exploit has been disclosed to...

PT-2025-16937 · WordPress · The Ultimate Dashboard

Name of the Vulnerable Software and Affected Versions: The Ultimate Dashboard WordPress plugin versions prior to 3.8.6 Description: The issue concerns a Stored Cross-Site Scripting vulnerability. It arises because the plugin does not properly sanitise and escape some of its settings, allowing...

PT-2025-16936 · Klarna · Klarna Checkout For Woocommerce

Name of the Vulnerable Software and Affected Versions: Klarna Checkout for WooCommerce versions prior to 2.13.5 Description: The issue exposes an unauthenticated WooCommerce Ajax endpoint, allowing an attacker to flood log files with data, potentially consuming disk space rapidly. Recommendations...

PT-2025-16966 · Think201 · Think201 Data Dash

Name of the Vulnerable Software and Affected Versions: Think201 Data Dash versions 1.2.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can injec...

PT-2025-17114 · WordPress · Rico Macchi Wp Featured Screenshot

Name of the Vulnerable Software and Affected Versions: Rico Macchi WP Featured Screenshot versions 1.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

PT-2025-17210 · Pycel · Pycel

Name of the Vulnerable Software and Affected Versions: Pycel versions 1.0b30 and earlier Description: The issue allows code execution via a crafted formula in a cell, such as one beginning with the =IFA1=200, eval" import 'os'.system substring." in an untrusted spreadsheet. Recommendations: For...

PT-2025-17004 · Unknown · Anthologize

Name of the Vulnerable Software and Affected Versions: Anthologize versions 0.8.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For Anthologize versions 0.8.3 an...