PT-2025-29753 · WordPress · Wpadverts

Name of the Vulnerable Software and Affected Versions: WPAdverts versions through 2.2.5 Description: The software contains a DOM-Based Cross-site Scripting issue due to improper neutralization of input during web page generation. Recommendations: Update WPAdverts to a version later than 2.2.5...

PT-2025-29859 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: Adobe Experience Manager is susceptible to a DOM-based Cross-Site Scripting XSS issue. A low privileged attacker could exploit this issue by manipulating the DOM environment to...

PT-2025-29884 · Idera · Idera Up.Time Monitoring Station

Name of the Vulnerable Software and Affected Versions: Idera Up.Time Monitoring Station versions up to and including 7.2 Description: An unauthenticated arbitrary file upload issue exists. The wizards/post2file.php script accepts arbitrary POST parameters, allowing attackers to upload crafted PHP...

PT-2025-29738 · Crocoblock · Jetpopup

Name of the Vulnerable Software and Affected Versions: Crocoblock JetPopup versions through 2.0.15 Description: The software contains a DOM-Based Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for potential malicious code execution...

PT-2025-29786 · Telegram · Site Chat On Telegram

Name of the Vulnerable Software and Affected Versions: Site Chat on Telegram versions n/a through 1.0.4 Description: A deserialization of untrusted data issue exists in Site Chat on Telegram, potentially allowing object injection. Recommendations: Update Site Chat on Telegram to a version later...

PT-2025-30579

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.64 Description A flaw exists in Apache HTTP Server where all "RewriteCond expr ..." tests evaluate as true. Recommendations Upgrade to version 2.4.65...

PT-2025-29816 · Unknown · Uxper Sala

Name of the Vulnerable Software and Affected Versions: uxper Sala versions n/a through 1.1.3 Description: A missing authorization issue exists in uxper Sala, allowing access to functionality not properly constrained by Access Control Lists ACLs. Recommendations: Update uxper Sala to a version...

PT-2025-29881 · Linknat · Linknat Vos3000 +2

Name of the Vulnerable Software and Affected Versions: Linknat VOS Manager versions prior to 2.1.9.07 Linknat VOS2009 Linknat VOS3000 early builds Description: A path traversal issue exists in Linknat VOS Manager that allows unauthenticated remote attackers to read arbitrary files on the server...

PT-2025-29806 · Woocommerce · Nc Wishlist For Woocommerce

Name of the Vulnerable Software and Affected Versions: Wishlist for WooCommerce versions n/a through 3.2.3 Description: The software contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations: Update Wishlist for WooCommerce to a version...

PT-2025-29693 · WordPress · Events Manager – Calendar

Name of the Vulnerable Software and Affected Versions: WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce versions prior to 3.1.50 Description: The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is susceptible to...

PT-2025-29692 · WordPress · Events Manager – Calendar

Name of the Vulnerable Software and Affected Versions: WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce versions up to and including 3.1.49 Description: The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress contai...

PT-2025-29726 · WordPress · Stop/Block Bots Plugin Anti Bots

Name of the Vulnerable Software and Affected Versions: Stop and Block bots plugin Anti bots versions n/a through 1.48 Description: The Stop and Block bots plugin Anti bots contains a missing authorization flaw. This allows access to functionality that is not properly restricted by Access Control...

PT-2025-29763 · WordPress · Wp Hide Post

Name of the Vulnerable Software and Affected Versions: xfinitysoft WP Post Hide versions n/a through 1.0.9 Description: A Cross-Site Request Forgery CSRF issue exists in xfinitysoft WP Post Hide, allowing attackers to perform actions on behalf of an authenticated user. Recommendations: Update...

PT-2025-29805 · Unknown · Funnelkit Funnel Builder

Name of the Vulnerable Software and Affected Versions: FunnelKit Funnel Builder versions through 3.10.2 Description: FunnelKit Funnel Builder is susceptible to a SQL injection flaw due to improper neutralization of special elements within SQL commands. This issue allows for potential SQL injectio...

PT-2025-29808 · Unknown · Alexvtn Internal Linking Of Related Contents

Name of the Vulnerable Software and Affected Versions: alexvtn Internal Linking of Related Contents versions n/a through 1.1.8 Description: A missing authorization issue exists in alexvtn Internal Linking of Related Contents, allowing exploitation of incorrectly configured access control security...

PT-2025-29741 · Houzez · Houzez

Name of the Vulnerable Software and Affected Versions: Houzez versions prior to 4.0.5 Description: A missing authorization issue exists in Houzez, allowing exploitation of incorrectly configured access control security levels. Recommendations: Update Houzez to version 4.0.5 or later...

PT-2025-29810 · Unknown · Codesolz Ultimate Push Notifications

Name of the Vulnerable Software and Affected Versions: CodeSolz Ultimate Push Notifications versions through 1.1.9 Description: The software contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations: Update CodeSolz Ultimate Push...

PT-2025-29888 · Unknown · Rips Scanner

Name of the Vulnerable Software and Affected Versions: RIPS Scanner version 0.54 Description: A path traversal vulnerability exists that allows remote attackers to read arbitrary files on the system with the privileges of the web server. This is achieved by sending crafted HTTP GET requests to th...

PT-2025-29707 · WordPress · Affiliate Reviews

Name of the Vulnerable Software and Affected Versions: Affiliate Reviews plugin for WordPress versions up to and including 1.0.6 Description: The Affiliate Reviews plugin for WordPress is susceptible to Stored Cross-Site Scripting through the numColumns parameter. Insufficient input sanitization...

PT-2025-29799 · Unknown · Infility Global

Name of the Vulnerable Software and Affected Versions: Infility Global versions through 2.13.4 Description: Infility Global is susceptible to a Reflected Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Update Infility Global to a...