PT-2025-21990 · Unknown · Easyvirt Dc Netscope

Name of the Vulnerable Software and Affected Versions: EasyVirt DC NetScope versions 8.7.0 and earlier Description: The issue allows remote authenticated attackers to execute arbitrary code. This can be achieved via several parameters, including the lang parameter to...

PT-2025-22047 · Unknown · Cookie Bar

Name of the Vulnerable Software and Affected Versions: cookieBAR versions 1.7.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For versions 1.7.0...

PT-2025-21877 · Unknown · Phpgurukul Daily Expense Tracker System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Daily Expense Tracker System version 1.1 Description: A critical vulnerability has been found in PHPGurukul Daily Expense Tracker System. This affects an unknown part of the file /expense-datewise-reports-detailed.php. The...

PT-2025-21985 · Unknown · Automatorwp

Name of the Vulnerable Software and Affected Versions: AutomatorWP versions through 5.2.1.3 Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL Injection, which can be...

PT-2025-22073 · Unknown · Andreyk Remote Images Grabber

Name of the Vulnerable Software and Affected Versions: andreyk Remote Images Grabber versions 0.6 and earlier Description: The issue affects andreyk Remote Images Grabber, allowing Reflected XSS due to improper neutralization of input during web page generation. This can lead to cross-site...

PT-2025-22080 · Highwarden · Highwarden Super Store Finder

Name of the Vulnerable Software and Affected Versions: highwarden Super Store Finder versions n/a through 7.2 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-22055 · Dkszone · Dkszone Eximius

Name of the Vulnerable Software and Affected Versions: dkszone Eximius versions n/a through 2.2 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the use of malicious files. Recommendations: For versions n/a through 2.2, consider restricting file...

PT-2025-21887 · WordPress · Ninja Forms

Name of the Vulnerable Software and Affected Versions: Ninja Forms WordPress plugin versions prior to 3.10.1 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is disallowed, f...

PT-2025-22009 · Unknown · Ghostwriter

Name of the Vulnerable Software and Affected Versions: Ghostwriter versions n/a through 1.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-21878 · Sourcecodester · Sourcecodester Client Database Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Client Database Management System version 1.0 Description: A critical issue was found in the software, affecting unknown code and leading to exposure of information through directory listing. The attack can be initiated remotel...

PT-2025-22004 · Unknown · Jinwen Js O3 Lite

Name of the Vulnerable Software and Affected Versions: jinwen Js O3 Lite versions 1.5.8.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

PT-2025-21948 · Unknown · Ultimate Blocks

Name of the Vulnerable Software and Affected Versions: Ultimate Blocks versions n/a through 3.3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS attacks. Recommendations: For...

PT-2025-22037 · WordPress · Mad Mimi For Wordpress

Name of the Vulnerable Software and Affected Versions: Mad Mimi for WordPress versions 1.5.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This means that an attacker c...

PT-2025-22071

Name of the Vulnerable Software and Affected Versions: Mikado-Themes Foton versions n/a through 2.5.2 Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...

PT-2025-22112 · Unknown · Danny Vink User Profile Meta Manager

Name of the Vulnerable Software and Affected Versions: Danny Vink User Profile Meta Manager versions 1.02 and earlier Description: A Cross-Site Request Forgery CSRF issue allows Privilege Escalation. This is a type of attack where an attacker tricks a user into performing unintended actions on a...

PT-2025-21913 · Unknown · Phpgurukul Auto Taxi Stand Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Auto Taxi Stand Management System version 1.0 Description: A critical issue affects the processing of the file /admin/admin-profile.php, where the manipulation of the mobilenumber argument leads to SQL injection. The attack can be...

PT-2025-22007 · Tijaji · Tijaji

Name of the Vulnerable Software and Affected Versions: Tijaji versions 1.43 and earlier Description: The issue affects Tijaji, allowing Reflected XSS due to improper neutralization of input during web page generation. This is a Cross-site Scripting vulnerability. Recommendations: For versions 1.4...

PT-2025-22029 · WordPress · Sanjeev Mohindra Author Box Plugin With Different Description

Name of the Vulnerable Software and Affected Versions: Sanjeev Mohindra Author Box Plugin With Different Description versions 1.3.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For Sanjeev Mohindra...

PT-2025-22021 · Unknown · Themes4Wp Bulk

Name of the Vulnerable Software and Affected Versions: Themes4WP Bulk versions 1.0.11 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 1.0.11 and earlier,...

PT-2025-21992 · 10Web · 10Web Form Maker

Name of the Vulnerable Software and Affected Versions: 10Web Form Maker by 10Web versions 1.15.33 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...