PT-2025-14835 · WordPress · Uncanny Automator

Name of the Vulnerable Software and Affected Versions: Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress versions up to, and including, 6.3.0.2 Description: The issue is due to the add role and user role functions missing proper capability checks...

PT-2025-14974 · Unknown · Ultra Addons Lite For Elementor

Name of the Vulnerable Software and Affected Versions: Ultra Addons Lite for Elementor versions 1.1.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

PT-2025-14978 · Unknown · Blazethemes News Kit Elementor Addons

Name of the Vulnerable Software and Affected Versions: blazethemes News Kit Elementor Addons versions 1.3.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

PT-2025-14878 · WordPress · Epc Ez Form Calculator

Name of the Vulnerable Software and Affected Versions: EPC ez Form Calculator - WordPress plugin versions 2.14.1.2 and earlier Description: The issue affects the EPC ez Form Calculator - WordPress plugin, allowing Reflected XSS due to improper neutralization of input during web page generation...

PT-2025-15029 · Unknown · Administrator Z

Name of the Vulnerable Software and Affected Versions: Administrator Z versions through 2025.03.04 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on the affected system. This is a type of attack where an attacker...

PT-2025-14887 · Unknown · Oblak Studio Srbtranslatin

Name of the Vulnerable Software and Affected Versions: Oblak Studio Srbtranslatin versions 3.2.0 and earlier Description: The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into externally-accessible files or directories. Recommendations: For...

PT-2025-14903 · Aiven · Aiven-Extras

Name of the Vulnerable Software and Affected Versions: aiven-extras versions prior to 1.1.16 Description: This issue is a privilege escalation vulnerability that allows elevation to superuser inside PostgreSQL databases using the aiven-extras package. It leverages the format function not being...

PT-2025-14985 · WordPress · Ai Image Alt Text Generator For Wp

Name of the Vulnerable Software and Affected Versions: Ai Image Alt Text Generator for WP versions 1.0.8 and earlier Description: The issue is related to Missing Authorization, allowing exploitation of incorrectly configured access control security levels. Recommendations: For versions 1.0.8 and...

PT-2025-14839 · Unknown · Spatie/Browsershot

Name of the Vulnerable Software and Affected Versions: spatie/browsershot versions 0.0.0 through 3.1 Description: The issue is related to Server-side Request Forgery SSRF in the setUrl function due to a missing restriction on user input. This enables attackers to access localhost and list all of...

PT-2025-14895 · Unknown · Shiptrack Booking Calendar/Notification

Name of the Vulnerable Software and Affected Versions: shiptrack Booking Calendar and Notification versions n/a through 4.0.3 Description: The issue is related to an SQL Injection vulnerability, specifically a Blind SQL Injection, due to the improper neutralization of special elements used in an...

PT-2025-14931 · Unknown · Stylemix Motors

Name of the Vulnerable Software and Affected Versions: Stylemix Motors versions 1.4.65 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

PT-2025-15022 · Unknown · Qr Code Tag For Wc

Name of the Vulnerable Software and Affected Versions: QR Code Tag for WC versions 1.9.36 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the QR Code Tag for WC, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions 1.9.36 and...

PT-2025-15026 · Pickplugins · Pickplugins Wishlist

Name of the Vulnerable Software and Affected Versions: PickPlugins Wishlist versions 1.0.44 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions 1.0.44 and...

PT-2025-14863 · Unknown · Phpgurukul E-Diary Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul e-Diary Management System version 1.0 Description: A critical issue was found in the /registration.php file, where the manipulation of the emailid argument leads to SQL injection. This issue can be exploited remotely...

PT-2025-14917 · Silvasoft · Silvasoft Boekhouden

Name of the Vulnerable Software and Affected Versions: Silvasoft boekhouden versions n/a through 3.0.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-14999 · WordPress · Vcita Online Booking & Scheduling Calendar

Name of the Vulnerable Software and Affected Versions: vcita Online Booking & Scheduling Calendar for WordPress by vcita versions through 4.5.2 Description: The issue allows retrieval of embedded sensitive data due to the generation of error messages containing sensitive information...

PT-2025-14944 · Unknown · Radius Blocks

Name of the Vulnerable Software and Affected Versions: Radius Blocks versions n/a through 2.2.1 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This...

PT-2025-15017 · Berocket · Berocket Sequential Order Numbers For Woocommerce

Name of the Vulnerable Software and Affected Versions: BeRocket Sequential Order Numbers for WooCommerce versions 3.6.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be...

PT-2025-14926 · Elementor · Split Test For Elementor

Name of the Vulnerable Software and Affected Versions: Split Test For Elementor versions 1.8.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can...

PT-2025-14953 · Unknown · Stylemix Motors

Name of the Vulnerable Software and Affected Versions: Stylemix Motors versions 1.4.65 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...