BELL-CVE-2023-53138

Bulletin has no description...

BELL-CVE-2023-53141

Bulletin has no description...

BELL-CVE-2023-53045

Bulletin has no description...

BELL-CVE-2023-53061

Bulletin has no description...

BELL-CVE-2023-53043

Bulletin has no description...

BELL-CVE-2025-47268

Bulletin has no description...

PT-2025-20205 · Woocommerce · Pays – Woocommerce Payment Gateway

Name of the Vulnerable Software and Affected Versions: Pays – WooCommerce Payment Gateway versions n/a through 2.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions n/a through 2.6, update to a version that fixes the CS...

PT-2025-20173 · Unknown · Syed Balkhi Beacon Lead Magnets/Lead Capture

Name of the Vulnerable Software and Affected Versions: Syed Balkhi Beacon Lead Magnets and Lead Capture versions 1.5.8 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF problem, which allows for Cross-Site Request Forgery. This means an attacker can trick a user...

PT-2025-20082 · Unknown · Listamester

Name of the Vulnerable Software and Affected Versions: Listamester versions prior to 2.3.7 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions prior to 2.3.7, update ...

PT-2025-20201 · Unknown · Supertext Translation/Proofreading

Name of the Vulnerable Software and Affected Versions: Supertext Translation and Proofreading versions n/a through 4.25 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions n/a through 4.25, update to a version that contai...

PT-2025-20025 · Rt · Rt-Labs P-Net

Name of the Vulnerable Software and Affected Versions: RT-Labs P-Net versions 1.0.1 and earlier Description: A heap-based buffer overflow in RT-Labs P-Net allows an attacker to corrupt the memory of IO devices that use the library by sending a malicious RPC packet. Recommendations: For RT-Labs...

PT-2025-20210 · Unknown · Productive Commerce

Name of the Vulnerable Software and Affected Versions: Productive Commerce versions n/a through 1.1.22 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-20159 · Unknown · Aresit Wp Compress

Name of the Vulnerable Software and Affected Versions: AresIT WP Compress versions n/a through 6.30.30 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions n/a through...

PT-2025-20141 · Unknown · Scott Paterson Easy Paypal Events

Name of the Vulnerable Software and Affected Versions: Scott Paterson Easy PayPal Events versions 1.2.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For version...

PT-2025-20293 · Unknown · Ixon Vpn Client

Name of the Vulnerable Software and Affected Versions: IXON VPN Client versions prior to 1.4.4 Description: The issue allows Local Privilege Escalation to SYSTEM due to code execution from a configuration file that can be controlled by a low-privileged user. A race condition exists where a...

PT-2025-20219 · Unknown · Credova Financial

Name of the Vulnerable Software and Affected Versions: Credova Financial versions n/a through 2.5.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions n/a through 2.5.0, update to a version that include...

PT-2025-20081 · WordPress · Wpdevart Widget Countdown

Name of the Vulnerable Software and Affected Versions: wpdevart Widget Countdown versions n/a through 2.7.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker ca...

PT-2025-20108 · Unknown · Testimonial Slider

Name of the Vulnerable Software and Affected Versions: GS Testimonial Slider versions 3.2.9 and earlier Description: The issue is related to an Improper Control of Generation of Code 'Code Injection' vulnerability, which allows Code Injection in GS Testimonial Slider. Recommendations: For GS...

PT-2025-20204 · Unknown · Otwthemes Sidebar Manager Light

Name of the Vulnerable Software and Affected Versions: OTWthemes Sidebar Manager Light versions 1.18 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions 1.18 and...

PT-2025-20072 · Lemeconsultoria · Galera.App

Name of the Vulnerable Software and Affected Versions: lemeconsultoria HCM galera.app version 4.58.0 Description: The issue allows an attacker to execute arbitrary code through multiple components, including Strategic Planning Perspective Registration, Training Request, Perspective Editing,...