PT-2025-14183 · Maksym Marko · Mx Time Zone Clocks

Name of the Vulnerable Software and Affected Versions: Maksym Marko MX Time Zone Clocks versions n/a through 5.1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

PT-2025-14193 · Xtreme · Planyo

Name of the Vulnerable Software and Affected Versions: xtreeme Planyo online reservation system versions n/a through 3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that a...

PT-2025-14400 · Woocommerce · Plugin Oficial – Getnet Para Woocommerce

Name of the Vulnerable Software and Affected Versions: Plugin Oficial – Getnet para WooCommerce versions 1.7.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS...

PT-2025-14264 · WordPress · Wp Multi Store Locator

Name of the Vulnerable Software and Affected Versions: WP Multistore Locator versions n/a through 2.5.2 Description: A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed on behalf of a user. This can lead to various security problems, including data modification or...

PT-2025-14244 · Joomsky · Joomsky Js Job Manager

Name of the Vulnerable Software and Affected Versions: JoomSky JS Job Manager versions through 2.0.2 Description: The issue affects the access control security levels in JoomSky JS Job Manager, allowing for authorization bypass through user-controlled key exploitation. This occurs due to...

PT-2025-14234 · Unknown · Brainvireinfo Export All Post Meta

Name of the Vulnerable Software and Affected Versions: brainvireinfo Export All Post Meta versions 1.2.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For brainvireinf...

PT-2025-17348 · Poppler +5 · Poppler +5

Name of the Vulnerable Software and Affected Versions: Poppler versions prior to 25.04.0 Description: The issue is related to the verification of adbe.pkcs7.sha1 signatures on documents. In the affected versions, the NSSCryptoSignBackend.cc in Poppler does not properly verify these signatures,...

PT-2025-14365 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A vulnerability in the Linux kernel has been resolved, related to the userfaultfd move function encountering swapcache. The issue arises when the function checks if the PTE entry i...

PT-2025-14030 · Unknown · Breezing Forms

Name of the Vulnerable Software and Affected Versions: Breezing Forms versions 1.2.8.11 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions 1.2.8.11...

PT-2025-14454 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 135.0.7049.52 Description: The issue is related to an inappropriate implementation in Custom Tabs, allowing a remote attacker to perform UI spoofing via a crafted HTML page if the user is convinced to engage in...

PT-2025-14104

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 137 Firefox ESR versions prior to 128.9 Thunderbird versions prior to 137 Thunderbird ESR versions prior to 128.9 Description A crafted URL containing specific Unicode characters could hide the true origin of the page...

PT-2025-14391 · Vform · Vform

Name of the Vulnerable Software and Affected Versions: VForm versions 3.1.9 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions 3.1.9 and earlier,...

PT-2025-14022 · Valmet · Valmet Dna

Name of the Vulnerable Software and Affected Versions: Valmet DNA versions prior to C2023 Description: The issue concerns an insecure DCOM configuration in Valmet DNA, specifically with the DCOM object Valmet DNA Engineering. This object has permissions that allow it to run commands as a user wit...

PT-2025-16446

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox version 7.1.6 Description: This is a high-severity vulnerability in Oracle VM VirtualBox that allows a high-privileged attacker to compromise the software. Successful exploitation can lead to unauthorized access to,...

PT-2025-14063 · Joomsky · Joomsky Js Help Desk

Name of the Vulnerable Software and Affected Versions: JoomSky JS Help Desk versions n/a through 2.9.1 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows for Path Traversal in JoomSky JS Help Desk...

PT-2025-14162 · WordPress · Uptime Robot Plugin

Name of the Vulnerable Software and Affected Versions: Uptime Robot Plugin for WordPress versions n/a through 2.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. Recommendations: For versions n/a through 2.3, update to a...

PT-2025-14174 · Unknown · Smackcoders Aio Performance Profiler

Name of the Vulnerable Software and Affected Versions: smackcoders AIO Performance Profiler, Monitor, Optimize, Compress & Debug versions 1.2 and earlier Description: The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into log files...

PT-2025-14226 · WordPress · Wpfactory Wordpress Adverts Plugin

Name of the Vulnerable Software and Affected Versions: WPFactory WordPress Adverts Plugin versions 1.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: F...

PT-2025-14248 · WordPress · Galaxy Weblinks Wp Clone Any Post Type

Name of the Vulnerable Software and Affected Versions: Galaxy Weblinks WP Clone any post type versions n/a through 3.4 Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, which allows phishing attacks. This vulnerability can be...

PT-2025-14135 · Feedblitz · Arni Cinco Subscription Form For Feedblitz

Name of the Vulnerable Software and Affected Versions: Arni Cinco Subscription Form for Feedblitz versions 1.0.0 through 1.0.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means...