PT-2023-27331 · Vathemes · Vathemes Business Pro

Name of the Vulnerable Software and Affected Versions: Vathemes Business Pro theme versions = 1.10.4 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to steal...

PT-2023-22730 · Imagerecycle · Imagerecycle Pdf & Image Compression Plugin

Name of the Vulnerable Software and Affected Versions: ImageRecycle ImageRecycle pdf & image compression plugin versions = 3.1.10 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...

PT-2025-10403

Name of the Vulnerable Software and Affected Versions MariaDB Server versions 10.4 through 10.11. MariaDB Server versions 11.0 through 11.4. Description The issue causes MariaDB Server to crash in Item direct view ref::derived field transformer for where. Recommendations For MariaDB Server versio...

PT-2023-5343 · Librey · Librey

Name of the Vulnerable Software and Affected Versions: LibreY versions prior to commit be59098abd119cda70b15bf3faac596dfd39a744 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability in the engines/google/text.php and engines/duckduckgo/text.php files. This...

PT-2023-28509 · WordPress · User Activity Log

Name of the Vulnerable Software and Affected Versions: User Activity Log WordPress plugin versions prior to 1.6.6 Description: The issue is related to a lack of proper authorization in the User Activity Log WordPress plugin, allowing any authenticated users to export activity logs and retrieve...

PT-2023-28161 · Cerebrate · Cerebrate

Name of the Vulnerable Software and Affected Versions: Cerebrate versions prior to 1.15 Description: The issue is related to the lack of the Secure attribute for the session cookie. This means that the session cookie is transmitted over an insecure channel, potentially allowing an attacker to...

PT-2023-27197 · Blindside Networks · Bigbluebutton

Name of the Vulnerable Software and Affected Versions: Blindside Networks BigBlueButton plugin versions = 3.0.0-beta.4 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowi...

PT-2023-27765

Name of the Vulnerable Software and Affected Versions hyper-bump-it versions prior to 0.5.1 Description The issue arises from hyper-bump-it reading a file glob pattern from the configuration file and combining it with the project root directory to construct a full glob pattern. This pattern is us...

PT-2023-27323 · Pixelgrade · Pixtypes

Name of the Vulnerable Software and Affected Versions: Pixelgrade PixTypes plugin versions 1.4.15 and earlier Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them t...

PT-2023-27194 · Std.Cloud · Wxsync Plugin

Name of the Vulnerable Software and Affected Versions: std.Cloud WxSync plugin versions = 2.7.23 Description: A Stored Cross-Site Scripting XSS vulnerability exists, allowing authenticated contributors to inject malicious scripts. The issue affects versions of the WxSync plugin up to and includin...

PT-2023-20083 · Gopi Ramasamy · Wp Tell A Friend Popup Form Plugin

Name of the Vulnerable Software and Affected Versions: Gopi Ramasamy wp tell a friend popup form plugin versions = 7.1 Description: The issue is related to an Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with administrative access can inject...

PT-2023-25563 · WordPress · Jeffrey-Wp Media Library Categories

Name of the Vulnerable Software and Affected Versions: Jeffrey-WP Media Library Categories plugin versions = 2.0.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects the Jeffrey-WP Media Library Categories plugin. This vulnerability requires...

PT-2023-26495 · Visualmodo · Visualmodo Borderless Plugin

Name of the Vulnerable Software and Affected Versions: Visualmodo Borderless plugin versions = 1.4.8 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inject malicious scripts into the...

PT-2023-6523 · Apache · Apache Nifi Minifi C++

Name of the Vulnerable Software and Affected Versions: Apache NiFi MiNiFi C++ versions 0.13 through 0.14 Description: The issue is related to incorrect certificate validation in the InvokeHTTP component, allowing an intermediary to present a forged certificate during TLS handshake negotiation. Th...

PT-2023-27928 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 2023.01.14.325 Description: The issue allows SQL Injection through the sort parameter of the "/index.php" endpoint. Recommendations: For versions prior to 2023.01.14.325, consider disabling the sort parameter in th...

PT-2023-30363 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.3-DEV Description: The issue concerns a floating point comparison with an incorrect operator in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.3-DEV, update to version 2.3-DEV or later to...

PT-2023-26233 · Miniorange · Miniorange Yourmembership Single Sign On – Ym Sso Login Plugin

Name of the Vulnerable Software and Affected Versions: miniOrange YourMembership Single Sign On – YM SSO Login plugin versions 1.1.3 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin privileges c...

PT-2023-19891 · Unknown · Oauth Twitter Feed For Developers

Name of the Vulnerable Software and Affected Versions: oAuth Twitter Feed for Developers plugin versions = 2.3.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects the oAuth Twitter...

PT-2023-27760 · Unknown · @Dcl/Single-Sign-On-Client

Name of the Vulnerable Software and Affected Versions: @dcl/single-sign-on-client versions prior to 0.1.0 Description: The issue concerns improper input validation in the init function, allowing arbitrary JavaScript to be executed using the javascript: prefix. This can be exploited by passing...

PT-2023-19733 · Unknown · Bludit Cms

Name of the Vulnerable Software and Affected Versions: BluditCMS version 3.14.1 Description: The issue allows attackers to execute arbitrary code via the Categories Friendly URL, specifically through a Cross Site Scripting vulnerability. This enables attackers to inject malicious scripts into...