PT-2025-17057 · WordPress · Uxgallery Wordpress Photo Gallery

Name of the Vulnerable Software and Affected Versions: uxgallery WordPress Photo Gallery – Image Gallery versions prior to 2.0.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS...

PT-2025-17079 · D Link · Dir 832

Name of the Vulnerable Software and Affected Versions: dlink DIR 832x version 240802 Description: The issue allows a remote attacker to execute arbitrary code via the function 0x417234. Recommendations: For dlink DIR 832x version 240802, as a temporary workaround, consider disabling the function...

PT-2025-18379 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server versions up to 2.0.7 Description: A critical vulnerability has been found in PCMan FTP Server, affecting an unknown part of the VERBOSE Command Handler component. The manipulation of this vulnerability leads to a buffer...

PT-2025-16966 · Think201 · Think201 Data Dash

Name of the Vulnerable Software and Affected Versions: Think201 Data Dash versions 1.2.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can injec...

PT-2025-17095 · WordPress · Wordpress Health/Server Condition – Integrated With Google Page Speed

Name of the Vulnerable Software and Affected Versions: WordPress Health and Server Condition – Integrated with Google Page Speed versions through 4.1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows...

PT-2025-17123 · Unknown · Mapro Collins Coming Soon Countdown

Name of the Vulnerable Software and Affected Versions: Mapro Collins Coming Soon Countdown versions n/a through 2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

PT-2025-18341 · NetGear · Netgear Ex6200

Name of the Vulnerable Software and Affected Versions: Netgear EX6200 version 1.0.3.94 Description: A critical vulnerability has been found, affecting the function sub 3C8EC. The manipulation of the argument host leads to a buffer overflow. This issue can be initiated remotely. The vendor was...

PT-2025-17168 · Unknown · Mapsvg Lite

Name of the Vulnerable Software and Affected Versions: MapSVG Lite versions prior to 8.5.35 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server. This can lead to further exploitation and potential...

PT-2025-17169 · WordPress · Wp Speedo Team Members

Name of the Vulnerable Software and Affected Versions: WP Speedo Team Members versions 3.4.0 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For WP Speedo Team Members versions 3.4.0 and earlier, update to a versi...

PT-2025-17073 · Unknown · Graphems List Urls

Name of the Vulnerable Software and Affected Versions: graphems List Urls versions n/a through 0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS in graphems List Urls. Recommendation...

PT-2025-16971 · Unknown · Rachanas Sponsered Link

Name of the Vulnerable Software and Affected Versions: rachanaS Sponsered Link versions n/a through 4.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS in rachanaS Sponsered Link...

PT-2025-17055 · Unknown · Bjornw File Icons

Name of the Vulnerable Software and Affected Versions: BjornW File Icons versions n/a through 2.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to injec...

PT-2025-17151 · Weptile · Weptile Shopapper

Name of the Vulnerable Software and Affected Versions: weptile ShopApper versions 0.4.39 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an attacker can...

PT-2025-17070 · Woocommerce · 17Track For Woocommerce

Name of the Vulnerable Software and Affected Versions: 17TRACK for WooCommerce versions 1.2.10 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an attacker can...

PT-2025-17119 · Unknown · License For Envato

Name of the Vulnerable Software and Affected Versions: License For Envato versions 1.0.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Reflected XSS, which can be exploited by attackers...

PT-2025-17007 · Unknown · Rajesh Broken Links Remover

Name of the Vulnerable Software and Affected Versions: Rajesh Broken Links Remover versions 1.2.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions 1.2.2 and earlier, update to a version that fixes this issu...

PT-2025-17071 · Unknown · Alvego Protected Wp-Login

Name of the Vulnerable Software and Affected Versions: alvego Protected wp-login versions n/a through 2.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This type of issue occurs...

PT-2025-17051 · Unknown · Divspark Flagged Content

Name of the Vulnerable Software and Affected Versions: divspark Flagged Content versions 1.0.0 through 1.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attacke...

PT-2025-17047 · Radiustheme · Radiustheme Classified Listing

Name of the Vulnerable Software and Affected Versions: RadiusTheme Classified Listing versions n/a through 4.0.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

PT-2025-17228 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Web-based Pharmacy Product Management System. This issue affects the file /edit-product.php and allo...