PT-2025-17076 · Unknown · Rebuild Permalinks

Name of the Vulnerable Software and Affected Versions: Rebuild Permalinks versions n/a through 1.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables potential attackers to...

PT-2025-18722 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical vulnerability was found in the SEND Command Handler component of PCMan FTP Server, leading to a buffer overflow. The attack can be launched remotely, and the exploit has been disclosed to...

PT-2025-17202 · Unknown · Pydio Core

Name of the Vulnerable Software and Affected Versions: Pydio Core versions 8.2.5 and earlier Description: The issue is related to Cross Site Scripting XSS via the New URL Bookmark feature. This allows for potential malicious script execution. Recommendations: For Pydio Core versions 8.2.5 and...

PT-2025-17107 · Unknown · Feedify – Web Push Notifications

Name of the Vulnerable Software and Affected Versions: Feedify – Web Push Notifications versions n/a through 2.4.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This means that ...

PT-2025-17210 · Pycel · Pycel

Name of the Vulnerable Software and Affected Versions: Pycel versions 1.0b30 and earlier Description: The issue allows code execution via a crafted formula in a cell, such as one beginning with the =IFA1=200, eval" import 'os'.system substring." in an untrusted spreadsheet. Recommendations: For...

PT-2025-16989 · WordPress · Wp Social Bookmarking

Name of the Vulnerable Software and Affected Versions: WP Social Bookmarking versions n/a through 3.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in PResponsive WP Social Bookmarking. Recommendations: For versions n/a through 3.6, update to a...

PT-2025-17000 · Unknown · Bknewsticker

Name of the Vulnerable Software and Affected Versions: Bknewsticker versions 1.0.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...

PT-2025-18378 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server versions up to 2.0.7 Description: A critical issue affects an unknown functionality of the LS Command Handler component in PCMan FTP Server, leading to a buffer overflow. This can be exploited remotely. The exploit has been...

PT-2025-18284 · NetGear · Netgear Wnr2000V2

Name of the Vulnerable Software and Affected Versions: Netgear JWNR2000v2 version 1.0.0.11 Description: A critical vulnerability was found in the Netgear JWNR2000v2, affecting the function sub 4238E8. The manipulation of the argument host leads to a buffer overflow. This issue can be exploited...

PT-2025-17150 · WordPress · Ketanajani Wp Donate

Name of the Vulnerable Software and Affected Versions: ketanajani WP Donate versions n/a through 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an attacker can...

PT-2025-16999 · Bbpress2 · Bbpress2

Name of the Vulnerable Software and Affected Versions: bbPress2 shortcode whitelist versions 2.2.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS attacks. This is due to a vulnerability in the bbPress2...

PT-2025-17004 · Unknown · Anthologize

Name of the Vulnerable Software and Affected Versions: Anthologize versions 0.8.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For Anthologize versions 0.8.3 an...

PT-2025-17186 · Unknown · Taskbuilder

Name of the Vulnerable Software and Affected Versions: Taskbuilder versions prior to 4.0.1 Description: The issue is related to improper neutralization of special elements used in an SQL command, which allows Blind SQL Injection. This means that an attacker can inject malicious SQL code into the...

PT-2025-17053 · Unknown · Saoshyant Slider

Name of the Vulnerable Software and Affected Versions: Saoshyant Slider versions n/a through 3.0 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions n/a through 3.0, update to a version that fixes the Deserialization...

PT-2025-17001 · Unknown · Scott Taylor Avatar

Name of the Vulnerable Software and Affected Versions: Scott Taylor Avatar versions 0.1.4 and earlier Description: The issue affects the access control security levels in Scott Taylor Avatar, allowing exploitation through incorrectly configured security levels. This is due to an Authorization...

PT-2025-16981 · Unknown · Mike Spam-Stopper

Name of the Vulnerable Software and Affected Versions: Mike spam-stopper versions n/a through 3.1.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, an...

PT-2025-17151 · Weptile · Weptile Shopapper

Name of the Vulnerable Software and Affected Versions: weptile ShopApper versions 0.4.39 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an attacker can...

PT-2025-17172 · Unknown · Nicdark Hotel Booking

Name of the Vulnerable Software and Affected Versions: nicdark Hotel Booking versions n/a through 3.6 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

PT-2025-17182 · Woocommerce · Bring Fraktguiden For Woocommerce

Name of the Vulnerable Software and Affected Versions: Bring Fraktguiden for WooCommerce versions 1.11.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

PT-2025-17003 · Unknown · Aidraw I Draw

Name of the Vulnerable Software and Affected Versions: aidraw I Draw versions n/a through 1.0 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the use of malicious files. Recommendations: For versions n/a through 1.0, consider restricting file...