PT-2025-14886 · WordPress · Wpforo Forum

Name of the Vulnerable Software and Affected Versions: wpForo Forum versions 2.4.2 and earlier Description: The issue is related to an Incorrect Privilege Assignment, which allows Privilege Escalation in the wpForo Forum. Recommendations: For versions 2.4.2 and earlier, update to a version that...

PT-2025-15024 · Unknown · Broadstreet

Name of the Vulnerable Software and Affected Versions: Broadstreet versions 1.51.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions 1.51.1 and earlier,...

PT-2025-15023 · Unknown · Crm Perks Wp Zendesk For Contact Form 7

Name of the Vulnerable Software and Affected Versions: CRM Perks WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms versions 1.1.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This...

PT-2025-14940

Name of the Vulnerable Software and Affected Versions Catch Dark Mode versions 1.2.1 and earlier Description The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...

PT-2025-14836 · Code Projects · Code-Projects Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Patient Record Management System version 1.0 Description: A critical issue affects some unknown processing of the file /birthing form.php. The manipulation of the argument birth id leads to sql injection. The attack may be...

PT-2025-14831 · Unknown · Codeastro Car Rental System

Name of the Vulnerable Software and Affected Versions: CodeAstro Car Rental System version 1.0 Description: A critical issue has been found in the CodeAstro Car Rental System, affecting some unknown functionality of the file /returncar.php. The manipulation of the ID argument leads to SQL...

PT-2025-15046

Name of the Vulnerable Software and Affected Versions Apache Airflow Common SQL Provider versions prior to 1.24.1 Description The issue is related to an SQL Injection vulnerability in the Apache Airflow Common SQL Provider. This vulnerability allows an authenticated UI user to inject arbitrary SQ...

PT-2025-14967

Name of the Vulnerable Software and Affected Versions Extend Themes Colibri Page Builder versions 1.0.0 through 1.0.319 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

PT-2025-15036

Name of the Vulnerable Software and Affected Versions xujiangfei admintwo version 1.0 Description A problematic issue has been found in xujiangfei admintwo, affecting an unknown part of the file /user/updateSet. The manipulation leads to cross-site request forgery. It is possible to initiate the...

PT-2025-14859 · Unknown · Phpgurukul Restaurant Table Booking System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Restaurant Table Booking System version 1.0 Description: A critical issue affects an unknown functionality of the file /admin/add-subadmin.php. The manipulation of the fullname argument leads to SQL injection. The attack can be...

PT-2025-14821 · Unknown · Itsourcecode Online Blood Bank Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Blood Bank Management System version 1.0 Description: A critical issue has been found in the itsourcecode Online Blood Bank Management System, affecting the processing of the file /bbms.php. The manipulation of the Search...

PT-2025-14963 · Woocommerce · Fast Simon Search

Name of the Vulnerable Software and Affected Versions: Fast Simon Search, Filters & Merchandising for WooCommerce versions 3.0.57 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS...

PT-2025-14877 · Unknown · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue has been discovered, affecting an unknown function of the file /search-request.php. The manipulation of the searchdata argument leads to SQL injection. It is...

PT-2025-14857

Name of the Vulnerable Software and Affected Versions M-Files Web versions 25.1.14445.5 through 25.2.14524.4 Description The issue allows an authenticated user to run scripts, which is a result of a stored XSS. This enables the execution of malicious scripts by authenticated users. Recommendation...

PT-2025-14889 · Simplish · Simplish

Name of the Vulnerable Software and Affected Versions: Simplish versions n/a through 2.6.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This means that an attacker can inject...

PT-2025-14913 · WordPress · Erick Danzer Easy Query – Wp Query Builder

Name of the Vulnerable Software and Affected Versions: Erick Danzer Easy Query – WP Query Builder versions 2.0.4 and earlier Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Bli...

CVE-2025-3160

A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::SceneCombiner::AddNodeHashes of the file code/Common/SceneCombiner.cpp of the component File Handler. The manipulation leads to out-of-bounds rea...

CVE-2025-29868

Private Data Structure Returned From A Public Method vulnerability in Apache Answer. This issue affects Apache Answer: through 1.4.2. If a user uses an externally referenced image, when a user accesses this image, the provider of the image may obtain private information about the ip address of th...

WordPress CF7 Spreadsheets plugin <= 2.3.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin CF7 Spreadsheets versions = 2.3.2...

WordPress LuckyWP Table of Contents plugin <= 2.1.10 - Cross-Site Request Forgery to Reflected Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Reflected Cross-Site Scripting vulnerability discovered by mikemyers in WordPress Plugin LuckyWP Table of Contents versions = 2.1.10...