PT-2025-29724 · Unknown · Parakoos Image Wall

Name of the Vulnerable Software and Affected Versions: Parakoos Image Wall versions through 3.1 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to a Cross-site Scripting condition. This allows for Stored XSS attacks. Recommendations...

PT-2025-29753 · WordPress · Wpadverts

Name of the Vulnerable Software and Affected Versions: WPAdverts versions through 2.2.5 Description: The software contains a DOM-Based Cross-site Scripting issue due to improper neutralization of input during web page generation. Recommendations: Update WPAdverts to a version later than 2.2.5...

PT-2025-29740 · Crocoblock · Crocoblock Jetsearch

Name of the Vulnerable Software and Affected Versions: Crocoblock JetSearch versions through 3.5.10.1 Description: The software contains a cross-site scripting XSS issue that allows for stored XSS attacks. This occurs due to improper neutralization of input during web page generation...

PT-2025-29721 · WordPress · Real Estate Property 2024 Create Your Own Fields/Search Bar Wp Plugin

Name of the Vulnerable Software and Affected Versions: Real Estate Property 2024 Create Your Own Fields and Search Bar WP Plugin versions through 4.48 Description: The Real Estate Property 2024 Create Your Own Fields and Search Bar WP Plugin contains a missing authorization issue. This allows...

PT-2025-29816 · Unknown · Uxper Sala

Name of the Vulnerable Software and Affected Versions: uxper Sala versions n/a through 1.1.3 Description: A missing authorization issue exists in uxper Sala, allowing access to functionality not properly constrained by Access Control Lists ACLs. Recommendations: Update uxper Sala to a version...

PT-2025-29783 · August Infotech · Multi-Language Responsive Contact Form

Name of the Vulnerable Software and Affected Versions: August Infotech Multi-language Responsive Contact Form versions through 2.8 Description: The Multi-language Responsive Contact Form software contains a missing authorization issue. Access to functionality is not properly constrained by Access...

PT-2025-29723 · Enituretechnology · Residential Address Detection

Name of the Vulnerable Software and Affected Versions: enituretechnology Residential Address Detection versions through 2.5.9 Description: The Residential Address Detection software contains a missing authorization flaw. This allows unauthorized access to functionality not properly constrained by...

PT-2025-29766 · WordPress · Responsive Addons For Elementor

Name of the Vulnerable Software and Affected Versions: CyberChimps Responsive Addons for Elementor versions through 1.7.3 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks...

PT-2025-29778 · WordPress +1 · Easy Video Player +1

Name of the Vulnerable Software and Affected Versions: FWDesign Easy Video Player Wordpress & WooCommerce versions through 10.0 Description: The software contains a Path Traversal issue due to improper limitation of a pathname to a restricted directory. Recommendations: Update to a version later...

PT-2025-29798 · WordPress · Elex Woocommerce Advanced Bulk Edit Products

Name of the Vulnerable Software and Affected Versions: ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes versions through 1.4.9 Description: The software contains a SQL injection flaw due to improper neutralization of special elements used in an SQL command. This allows for...

PT-2025-29804 · Unknown · Smu Manual Dofollow

Name of the Vulnerable Software and Affected Versions: SMu Manual DoFollow versions through 1.8.1 Description: The software contains a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of malicious scripts in...

PT-2025-29801 · Unknown · Groundhogg

Name of the Vulnerable Software and Affected Versions: Groundhogg versions through 4.2.1 Description: Groundhogg is susceptible to an unrestricted file upload issue that allows for the upload of a web shell to a web server. Recommendations: Update Groundhogg to a version later than 4.2.1...

PT-2025-29762 · WordPress · Wp Swings Wallet System For Woocommerce

Name of the Vulnerable Software and Affected Versions: WP Swings Wallet System for WooCommerce versions n/a through 2.6.7 Description: The software contains a Cross-Site Request Forgery CSRF flaw. This issue allows attackers to perform actions on behalf of authenticated users without their...

PT-2025-29782 · WordPress · Thimpress Wp Pipes

Name of the Vulnerable Software and Affected Versions: ThimPress WP Pipes versions through 1.4.3 Description: ThimPress WP Pipes is susceptible to a SQL injection issue due to improper neutralization of special elements used in SQL commands. Recommendations: Update ThimPress WP Pipes to a version...

PT-2025-29777 · Nootheme · Nootheme Yogi

Name of the Vulnerable Software and Affected Versions: NooTheme Yogi versions through 2.9.0 Description: The software contains a deserialization of untrusted data flaw that allows for object injection. Recommendations: Update NooTheme Yogi to a version later than 2.9.0...

PT-2025-29746 · Nanbu · Nanbu Welcart E-Commerce

Name of the Vulnerable Software and Affected Versions: nanbu Welcart e-Commerce versions through 2.11.16 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. This can potentially lead to the...

PT-2025-29743 · Crocoblock · Jetsmartfilters

Name of the Vulnerable Software and Affected Versions: Crocoblock JetSmartFilters versions through 3.6.8 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. The vulnerability allows for stored XSS attacks...

PT-2025-29789 · Unknown · Coschool Lms

Name of the Vulnerable Software and Affected Versions: CoSchool LMS versions n/a through 1.4.3 Description: A deserialization of untrusted data issue exists in CoSchool LMS, allowing for object injection. Recommendations: Update CoSchool LMS to a version later than 1.4.3...

PT-2025-29878 · Tp Link · Archer C1200

Name of the Vulnerable Software and Affected Versions: TP-Link Archer C1200 versions prior to 1.1.6 Description: A clickjacking issue exists in the web management page of the TP-Link Archer C1200. This allows an attacker to deceive users into performing actions they did not intend through the...

PT-2025-29815 · Unknown · Ezihosting Tennis Court Bookings

Name of the Vulnerable Software and Affected Versions: EZiHosting Tennis Court Bookings versions through 1.2.7 Description: The software contains a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows an attacker to inject...