PT-2025-53893

Name of the Vulnerable Software and Affected Versions Stephen Harris Event Organiser event-organiser versions through 3.12.8 Description An issue exists in Stephen Harris Event Organiser event-organiser related to incorrectly configured access control security levels, potentially allowing...

PT-2025-54175

Name of the Vulnerable Software and Affected Versions zhujunliang3 work platform versions prior to 6bc5a50bb527ce27f7906d11ea6ec139beb79c31 Description A cross site scripting issue exists in the Content Handler component of the software. The issue can be triggered remotely through manipulation. T...

PT-2025-53882

Name of the Vulnerable Software and Affected Versions XforWooCommerce Share, Print and PDF Products for WooCommerce versions through 3.1.2 Description The software contains a missing authorization issue due to incorrectly configured access control security levels. This allows for potential...

PT-2025-53904

Name of the Vulnerable Software and Affected Versions Marketing Fire Discussion Board wp-discussion-board versions through 2.5.7 Description An authorization issue exists in Marketing Fire Discussion Board wp-discussion-board, allowing exploitation due to incorrectly configured access control...

PT-2025-53886

Name of the Vulnerable Software and Affected Versions wpDiscuz versions through 7.6.40 Description An authorization bypass exists due to incorrectly configured access control security levels. This allows exploitation through a user-controlled key. Recommendations Update wpDiscuz to a version late...

PT-2025-53920

Name of the Vulnerable Software and Affected Versions wpdesk ShopMagic versions through 4.7.2 Description An authorization issue exists in wpdesk ShopMagic shopmagic-for-woocommerce, allowing exploitation of incorrectly configured access control security levels. Recommendations Update wpdesk...

PT-2025-53905

Name of the Vulnerable Software and Affected Versions bizswoop BizPrint versions through 4.6.7 Description An authorization issue exists within bizswoop BizPrint, allowing exploitation due to incorrectly configured access control security levels. This allows unauthorized access. Recommendations...

PT-2025-53885

Name of the Vulnerable Software and Affected Versions WebCodingPlace Responsive Posts Carousel Pro versions through 15.1 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for...

CVE-2025-69205 In µURU, a Specially Crafted Federation Name Allows Dialplan Injection

Micro Registration Utility µURU is a telephone self registration utility based on asterisk. In versions up to and including commit 88db9a953f38a3026bcd6816d51c7f3b93c55893, an attacker can crafts a special federation name and characters treated special by asterisk can be injected into the Dial...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses keras-2.14.0-py3-none-any.whl which is vulnerable to CVE-2024-55459.

Summary IBM Maximo Application Suite - Monitor Component uses keras-2.14.0-py3-none-any.whl which is vulnerable to CVE-2024-55459. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2024-55459 DESCRIPTION: An issue in keras 3.7.0 allows attackers to...

WordPress YaMaps plugin < 0.6.40 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Alex Tselevich nos3curity in WordPress Plugin YaMaps for WordPress versions 0.6.40...

PT-2025-53794

Name of the Vulnerable Software and Affected Versions Crocoblock JetPopup versions through 2.0.20.1 Description An authorization bypass exists in Crocoblock JetPopup due to incorrectly configured access control security levels. This allows exploitation through a user-controlled key. Recommendatio...

PT-2025-53777

Name of the Vulnerable Software and Affected Versions PixelYourSite versions up to and including 11.1.5 Description The PixelYourSite plugin for WordPress is susceptible to sensitive information disclosure through publicly exposed log files. An unauthenticated attacker may be able to view...

SUSE: Security Advisory (SUSE-SU-2025:4523-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-53772

Name of the Vulnerable Software and Affected Versions Plugin Optimizer versions through 1.3.7 Description A missing authorization issue exists in Plugin Optimizer, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Plugin Optimizer to a...

PT-2025-53828

Name of the Vulnerable Software and Affected Versions Jakub Glos Off Page SEO versions through 3.0.3 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, leading to a potential Reflected Cross-Site Scripting XSS condition. This allo...

PT-2025-53813

Name of the Vulnerable Software and Affected Versions CubeWP versions through 1.1.27 Description A missing authorization issue exists in CubeWP, allowing access to functionality that is not properly restricted by Access Control Lists ACLs. This could allow unauthorized access to certain features ...

PT-2025-53814

Name of the Vulnerable Software and Affected Versions weDevs WP Project Manager versions through 3.0.1 Description A flaw exists in weDevs WP Project Manager that allows for the retrieval of embedded sensitive data. The issue involves the insertion of sensitive information into sent data...

WordPress Web Directory Free plugin <= 1.7.12 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Web Directory Free versions = 1.7.12...

PT-2025-53667

Name of the Vulnerable Software and Affected Versions h-moses moga-mall versions prior to 392d631a5ef15962a9bddeeb9f1269b9085473fa Description A vulnerability exists in h-moses moga-mall. The issue affects the addProduct function within the file...