PT-2025-17139 · Unknown · Bowo Debug Log Manager

Name of the Vulnerable Software and Affected Versions: Bowo Debug Log Manager versions through 2.3.4 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicious...

PT-2025-17005 · Unknown · Momen2009 Theme Changer

Name of the Vulnerable Software and Affected Versions: momen2009 Theme Changer versions 1.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where an attack...

PT-2025-17188 · Bertha Ai · Bertha Ai

Name of the Vulnerable Software and Affected Versions: BERTHA AI versions 1.12.10.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows for the exploitation of incorrectly configured access control security levels. This enables unauthorized access...

PT-2025-16938 · WordPress · The Ultimate Dashboard

Name of the Vulnerable Software and Affected Versions: The Ultimate Dashboard WordPress plugin versions prior to 3.8.6 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible because some settings are not properly...

PT-2025-17134 · Expresstechsoftware · Memberpress Discord Addon

Name of the Vulnerable Software and Affected Versions: expresstechsoftware MemberPress Discord Addon versions 1.1.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS...

PT-2025-17009 · Unknown · Review Wave – Google Places Reviews

Name of the Vulnerable Software and Affected Versions: Review Wave – Google Places Reviews versions 1.4.7 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the...

PT-2025-17083 · Unknown · Videowhisper Paid Videochat Turnkey Site

Name of the Vulnerable Software and Affected Versions: videowhisper Paid Videochat Turnkey Site versions n/a through 7.3.11 Description: The issue is related to a Weak Password Recovery Mechanism for Forgotten Password, which allows password recovery exploitation. Recommendations: For versions n/...

PT-2025-17084 · WordPress · Websitedefender Wp Secure

Name of the Vulnerable Software and Affected Versions: WebsiteDefender wp secure versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-17110 · WordPress · Push Notification For Wp

Name of the Vulnerable Software and Affected Versions: All push notification for WP versions 1.5.3 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Reflected XSS. This means an attacker could potentially trick a user into performing...

PT-2025-16987 · WordPress · Wp Twitter Button

Name of the Vulnerable Software and Affected Versions: WP Twitter Button versions 1.4.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to inject...

PT-2025-17152 · Unknown · Wecantrack Affiliate Links Lite

Name of the Vulnerable Software and Affected Versions: wecantrack Affiliate Links Lite versions 3.1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an attacke...

PT-2025-17067

Name of the Vulnerable Software and Affected Versions Kush Micro News versions 1.6.7 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For versions...

PT-2025-17173 · Bestwebsoft · Rating By Bestwebsoft

Name of the Vulnerable Software and Affected Versions: Rating by BestWebSoft versions 1.7 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions 1.7 and earlier, update to a version that contains a fix for...

PT-2025-17004 · Unknown · Anthologize

Name of the Vulnerable Software and Affected Versions: Anthologize versions 0.8.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For Anthologize versions 0.8.3 an...

PT-2025-17177 · Unknown · Xelion Webchat

Name of the Vulnerable Software and Affected Versions: Xelion Webchat versions n/a through 9.1.0 Description: The issue is related to an Incorrect Privilege Assignment, which allows Privilege Escalation in Xelion Webchat. Recommendations: For versions n/a through 9.1.0, update to a version that...

PT-2025-17080 · Arete It · Arete-It Activity Reactions For Buddypress

Name of the Vulnerable Software and Affected Versions: arete-it Activity Reactions For Buddypress versions 1.0.0 through 1.0.22 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enable...

PT-2025-16981 · Unknown · Mike Spam-Stopper

Name of the Vulnerable Software and Affected Versions: Mike spam-stopper versions n/a through 3.1.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, an...

PT-2025-16962 · Opentext · Opentext Ucmdb +2

Name of the Vulnerable Software and Affected Versions: OpenText Operations Bridge Manager versions through 2021.05 OpenText Operations Bridge Suite Containerized versions through 2021.05 OpenText UCMDB Classic and Containerized versions through 2021.05 Description: The issue allows authenticated...

PT-2025-16985 · Unknown · Ajayver Rss Manager

Name of the Vulnerable Software and Affected Versions: ajayver RSS Manager versions 0.06 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions 0.06 and earlier, update to a version that fixes this issue, as no...

PT-2025-17088 · Unknown · Commotion Course Booking System

Name of the Vulnerable Software and Affected Versions: ComMotion Course Booking System versions n/a through 6.0.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...