PT-2025-14886 · WordPress · Wpforo Forum

Name of the Vulnerable Software and Affected Versions: wpForo Forum versions 2.4.2 and earlier Description: The issue is related to an Incorrect Privilege Assignment, which allows Privilege Escalation in the wpForo Forum. Recommendations: For versions 2.4.2 and earlier, update to a version that...

PT-2025-14836 · Code Projects · Code-Projects Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Patient Record Management System version 1.0 Description: A critical issue affects some unknown processing of the file /birthing form.php. The manipulation of the argument birth id leads to sql injection. The attack may be...

PT-2025-14895 · Unknown · Shiptrack Booking Calendar/Notification

Name of the Vulnerable Software and Affected Versions: shiptrack Booking Calendar and Notification versions n/a through 4.0.3 Description: The issue is related to an SQL Injection vulnerability, specifically a Blind SQL Injection, due to the improper neutralization of special elements used in an...

PT-2025-15026 · Pickplugins · Pickplugins Wishlist

Name of the Vulnerable Software and Affected Versions: PickPlugins Wishlist versions 1.0.44 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions 1.0.44 and...

PT-2025-14839 · Unknown · Spatie/Browsershot

Name of the Vulnerable Software and Affected Versions: spatie/browsershot versions 0.0.0 through 3.1 Description: The issue is related to Server-side Request Forgery SSRF in the setUrl function due to a missing restriction on user input. This enables attackers to access localhost and list all of...

PT-2025-15029 · Unknown · Administrator Z

Name of the Vulnerable Software and Affected Versions: Administrator Z versions through 2025.03.04 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on the affected system. This is a type of attack where an attacker...

PT-2025-14913 · WordPress · Erick Danzer Easy Query – Wp Query Builder

Name of the Vulnerable Software and Affected Versions: Erick Danzer Easy Query – WP Query Builder versions 2.0.4 and earlier Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Bli...

PT-2025-14877 · Unknown · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue has been discovered, affecting an unknown function of the file /search-request.php. The manipulation of the searchdata argument leads to SQL injection. It is...

PT-2025-14857 · M Files · M-Files Web

Name of the Vulnerable Software and Affected Versions: M-Files Web versions 25.1.14445.5 through 25.2.14524.4 Description: The issue allows an authenticated user to run scripts, which is a result of a stored XSS. This enables the execution of malicious scripts by authenticated users...

PT-2025-14835 · WordPress · Uncanny Automator

Name of the Vulnerable Software and Affected Versions: Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress versions up to, and including, 6.3.0.2 Description: The issue is due to the add role and user role functions missing proper capability checks...

PT-2025-14963 · Woocommerce · Fast Simon Search

Name of the Vulnerable Software and Affected Versions: Fast Simon Search, Filters & Merchandising for WooCommerce versions 3.0.57 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS...

PT-2025-14821 · Unknown · Itsourcecode Online Blood Bank Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Blood Bank Management System version 1.0 Description: A critical issue has been found in the itsourcecode Online Blood Bank Management System, affecting the processing of the file /bbms.php. The manipulation of the Search...

PT-2025-15036 · Unknown · Xujiangfei Admintwo

Name of the Vulnerable Software and Affected Versions: xujiangfei admintwo version 1.0 Description: A problematic issue has been found in xujiangfei admintwo, affecting an unknown part of the file /user/updateSet. The manipulation leads to cross-site request forgery. It is possible to initiate th...

PT-2025-14953 · Unknown · Stylemix Motors

Name of the Vulnerable Software and Affected Versions: Stylemix Motors versions 1.4.65 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-15023 · Unknown · Crm Perks Wp Zendesk For Contact Form 7

Name of the Vulnerable Software and Affected Versions: CRM Perks WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms versions 1.1.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This...

PT-2025-14985 · WordPress · Ai Image Alt Text Generator For Wp

Name of the Vulnerable Software and Affected Versions: Ai Image Alt Text Generator for WP versions 1.0.8 and earlier Description: The issue is related to Missing Authorization, allowing exploitation of incorrectly configured access control security levels. Recommendations: For versions 1.0.8 and...

PT-2025-14926 · Elementor · Split Test For Elementor

Name of the Vulnerable Software and Affected Versions: Split Test For Elementor versions 1.8.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can...

PT-2025-14878 · WordPress · Epc Ez Form Calculator

Name of the Vulnerable Software and Affected Versions: EPC ez Form Calculator - WordPress plugin versions 2.14.1.2 and earlier Description: The issue affects the EPC ez Form Calculator - WordPress plugin, allowing Reflected XSS due to improper neutralization of input during web page generation...

PT-2025-14903 · Aiven · Aiven-Extras

Name of the Vulnerable Software and Affected Versions: aiven-extras versions prior to 1.1.16 Description: This issue is a privilege escalation vulnerability that allows elevation to superuser inside PostgreSQL databases using the aiven-extras package. It leverages the format function not being...

PT-2025-14940

Name of the Vulnerable Software and Affected Versions Catch Dark Mode versions 1.2.1 and earlier Description The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...