PT-2025-21364 · Unknown · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue affects an unknown functionality of the file /pages/credit transaction add.php. The manipulation of the prod name argument leads to SQL injection. The attack can b...

PT-2025-21287 · Unknown · Phpgurukul Directory Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Directory Management System version 2.0 Description: A critical issue has been discovered, affecting the /admin/forget-password.php file. The manipulation of the email argument leads to SQL injection. This issue can be exploited...

PT-2025-21453 · WordPress · Ditty

Name of the Vulnerable Software and Affected Versions: Ditty WordPress plugin versions prior to 3.1.52 Description: The issue concerns the Ditty WordPress plugin, which does not properly sanitize and escape some of its settings. This could allow high-privilege users, such as authors, to perform...

PT-2025-21346 · Unknown · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue has been found, affecting some unknown functionality of the file /pages/transaction.php. The manipulation of the cid argument leads to SQL injection. The attack ma...

PT-2025-21326 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 10.5.x through 10.5.3 Mattermost versions 9.11.x through 9.11.11 Description: The issue arises when a user lacks access to ExperimentalSettings, causing the system to fail in checking the RestrictSystemAdmin setting. This...

PT-2025-21580 · Unknown · Itsourcecode Placement Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Placement Management System version 1.0 Description: A critical issue was found in the itsourcecode Placement Management System, affecting an unknown part of the file /view drive.php. The manipulation of the ID argument leads to...

PT-2025-21534 · WordPress · Z-Downloads

Name of the Vulnerable Software and Affected Versions: Z-Downloads WordPress plugin versions prior to 1.11.6 Description: The issue arises from the plugin's failure to properly sanitise and escape certain parameters when they are displayed on the page. This oversight could allow unauthenticated...

PT-2025-21543 · Unknown · Free Booking Plugin

Name of the Vulnerable Software and Affected Versions: Free Booking Plugin for Hotels, Restaurants and Car Rentals versions prior to 1.3.15 Description: The issue concerns the lack of CSRF check when updating settings, which could allow attackers to make a logged-in subscriber change them via a...

PT-2025-21260 · WordPress · Weluka Lite

Name of the Vulnerable Software and Affected Versions: Weluka Lite plugin for WordPress versions up to, and including, 1.0.3 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'weluka-map' shortcode due to insufficient input sanitization and output escaping on...

PT-2025-21265 · WordPress · Responsive Lightbox & Gallery

Name of the Vulnerable Software and Affected Versions: Responsive Lightbox & Gallery WordPress plugin versions prior to 2.5.1 Description: The issue concerns a Stored Cross-Site Scripting attack. Users with the contributor role and above can exploit this due to the plugin's failure to validate an...

PT-2025-21328 · Unknown · Phpgurukul Vehicle Parking Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Vehicle Parking Management System version 1.13 Description: A critical issue has been found in the PHPGurukul Vehicle Parking Management System, affecting an unknown functionality of the file /admin/admin-profile.php. The...

CVE-2025-27523: Improper Restriction of XML External Entity Reference

XXE vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This issue affects JP1/IT Desktop Management 2 - Smart Device Manager: from 12-00 before 12-00-08, from 11-10 through 11-10-08, from 11-00 through 11-00-05, from 10-50 through 10-50-06...

PT-2025-21330 · Unknown · Phpgurukul Vehicle Parking Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Vehicle Parking Management System version 1.13 Description: A critical issue was found in the PHPGurukul Vehicle Parking Management System. The problem affects the file /admin/view-incomingvehicle-detail.php, where the manipulation...

PT-2025-21367 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog Pro versions prior to 2.5.10 Description: The issue is related to a file upload vulnerability in the store.php component, which fails to properly validate the contents of remotely downloaded ZIP plugin files. This insufficient validatio...

PT-2025-21579 · Unknown · Itsourcecode Placement Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Placement Management System version 1.0 Description: A critical issue has been found in the itsourcecode Placement Management System, affecting some unknown functionality of the file /student profile.php. The manipulation of the ...

PT-2025-21577 · Unknown · Itsourcecode Placement Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Placement Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file /edit profile.php. The manipulation of the Name argument leads to SQL injection. This issue can ...

PT-2025-21261 · Unknown · Uipress Lite

Name of the Vulnerable Software and Affected Versions: UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress versions up to, and including, 3.5.07 Description: The issue is related to Remote Code Execution in the UiPress lite plugin for WordPress. This is due to...

PT-2025-21345 · Unknown · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /pages/transaction del.php. The manipulation of the ID argument leads to SQL injection. Thi...

PT-2025-21288 · Unknown · Phpgurukul Apartment Visitors Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Apartment Visitors Management System version 1.0 Description: A critical vulnerability was found in the PHPGurukul Apartment Visitors Management System. This issue affects the file /admin/visitors-form.php and allows for SQL...

PT-2025-21363 · Unknown · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue has been discovered in the system, affecting an unknown functionality of the /pages/view application.php file. The manipulation of the cid argument leads to SQL...