PT-2025-20191 · Unknown · Dofollow Case By Case

Name of the Vulnerable Software and Affected Versions: DoFollow Case by Case versions through 3.5.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-20196 · Unknown · Raihanul Islam Awesome Gallery

Name of the Vulnerable Software and Affected Versions: Raihanul Islam Awesome Gallery versions 1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...

PT-2025-20130 · Unknown · Contextual Related Posts

Name of the Vulnerable Software and Affected Versions: Ajay Contextual Related Posts versions n/a through 4.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an...

PT-2025-20188 · Unknown · Apasionados Email Notification On Login

Name of the Vulnerable Software and Affected Versions: apasionados Email Notification on Login versions n/a through 1.6.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that ...

PT-2025-20138 · Unknown · Scott Paterson Time Clock

Name of the Vulnerable Software and Affected Versions: Scott Paterson Time Clock versions 1.2.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables an attacker to inject...

PT-2025-20143 · Unknown · Robo Gallery

Name of the Vulnerable Software and Affected Versions: Robo Gallery versions through 5.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject maliciou...

PT-2025-20062 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.29.23 Description: The issue concerns the use of implicit intent for sensitive communication in translation, allowing local attackers to obtain sensitive information. User interaction is required to trigger...

PT-2025-20187 · Unknown · Meks Flexible Shortcodes

Name of the Vulnerable Software and Affected Versions: Meks Flexible Shortcodes versions 1.3.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to...

PT-2025-20036 · Unknown · Keymaster Trustlet

Name of the Vulnerable Software and Affected Versions: Keymaster trustlet versions prior to SMR May-2025 Release 1 Description: The issue is an out-of-bounds write in the Keymaster trustlet, allowing local privileged attackers to write out-of-bounds memory. This can be exploited by local privileg...

PT-2025-20190 · Unknown · Dofollow Case By Case

Name of the Vulnerable Software and Affected Versions: DoFollow Case by Case versions 3.5.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the use...

PT-2025-20042 · Unknown · Smart Manager

Name of the Vulnerable Software and Affected Versions: SmartManagerCN versions prior to SMR May-2025 Release 1 Description: The issue is related to improper access control in SmartManagerCN, which allows local attackers to launch arbitrary activities with SmartManagerCN privilege. This can be...

PT-2025-20180 · Unknown · Easy Connect

Name of the Vulnerable Software and Affected Versions: EasyMe Connect versions 3.0.3 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions 3.0.3 and earlier, update to...

PT-2025-20154 · Wedevs · Webmail

Name of the Vulnerable Software and Affected Versions: weDevs weMail versions 1.14.13 and earlier Description: The issue allows exposure of sensitive system information to an unauthorized control sphere, enabling the retrieval of embedded sensitive data. Recommendations: For weDevs weMail version...

PT-2025-20144 · Unknown · Aweos Wp Lock

Name of the Vulnerable Software and Affected Versions: AWEOS WP Lock versions 1.4.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious...

PT-2025-20169 · Unknown · Lehel Mátyus Legal Terms/Conditions Popup For User Login/Woocommerce Checkout

Name of the Vulnerable Software and Affected Versions: Lehel Mátyus Legal Terms and Conditions Popup for User Login and WooCommerce Checkout – TPUL versions 2.0.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored...

PT-2025-20195 · Unknown · Ajax Load More

Name of the Vulnerable Software and Affected Versions: Ajax Load More versions through 7.3.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This enables an attacker to inject malicious...

PT-2025-20057 · Samsung · Samsung Flow

Name of the Vulnerable Software and Affected Versions: Samsung Flow versions prior to 4.9.17.6 Description: The issue is related to improper verification of intent by a broadcast receiver, allowing local attackers to modify the configuration. This could potentially lead to unauthorized changes in...

PT-2025-20095 · Unknown · Solace Extra

Name of the Vulnerable Software and Affected Versions: Solace Extra versions 1.3.1 and earlier Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. This means an attacker can potentially trick the server into making...

PT-2025-20164 · Unknown · Ctltwp Wiki Embed

Name of the Vulnerable Software and Affected Versions: ctltwp Wiki Embed versions 1.4.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions 1.4.6 and...

PT-2025-20084 · WordPress · Thimpress Wp Hotel Booking

Name of the Vulnerable Software and Affected Versions: ThimPress WP Hotel Booking versions n/a through 2.1.9 Description: A Cross-Site Request Forgery CSRF issue affects ThimPress WP Hotel Booking, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions n/...