PT-2025-29724 · Unknown · Parakoos Image Wall

Name of the Vulnerable Software and Affected Versions: Parakoos Image Wall versions through 3.1 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to a Cross-site Scripting condition. This allows for Stored XSS attacks. Recommendations...

PT-2025-29753 · WordPress · Wpadverts

Name of the Vulnerable Software and Affected Versions: WPAdverts versions through 2.2.5 Description: The software contains a DOM-Based Cross-site Scripting issue due to improper neutralization of input during web page generation. Recommendations: Update WPAdverts to a version later than 2.2.5...

PT-2025-29740 · Crocoblock · Crocoblock Jetsearch

Name of the Vulnerable Software and Affected Versions: Crocoblock JetSearch versions through 3.5.10.1 Description: The software contains a cross-site scripting XSS issue that allows for stored XSS attacks. This occurs due to improper neutralization of input during web page generation...

PT-2025-29783 · August Infotech · Multi-Language Responsive Contact Form

Name of the Vulnerable Software and Affected Versions: August Infotech Multi-language Responsive Contact Form versions through 2.8 Description: The Multi-language Responsive Contact Form software contains a missing authorization issue. Access to functionality is not properly constrained by Access...

PT-2025-29732 · Crocoblock +1 · Jetelements For Elementor +1

Name of the Vulnerable Software and Affected Versions: Crocoblock JetElements For Elementor versions through 2.7.7 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks...

PT-2025-29791 · WordPress +1 · Html5 Audio Player +1

Name of the Vulnerable Software and Affected Versions: HTML5 Radio Player - WPBakery Page Builder Addon versions through 2.5 Description: The HTML5 Radio Player - WPBakery Page Builder Addon is susceptible to a path traversal issue. This allows an attacker to access files outside of the intended...

PT-2025-29722 · Unknown · Atakan Au Import Cdn-Remote Images

Name of the Vulnerable Software and Affected Versions: Atakan Au Import CDN-Remote Images versions n/a through 2.1.2 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Atakan Au Import CDN-Remote Images, which can lead to Stored Cross-Site Scripting XSS. Recommendations: Updat...

PT-2025-29875 · Hewlett Packard · Hpe Autopass License Server

Name of the Vulnerable Software and Affected Versions: HPE AutoPass License Server APLS versions prior to 9.18 Description: An authentication bypass allows unauthorized access to the system. Recommendations: Update HPE AutoPass License Server to version 9.18 or later...

PT-2025-29872 · Hewlett Packard · Hpe Autopass License Server

Name of the Vulnerable Software and Affected Versions: HPE AutoPass License Server APLS versions prior to 9.18 Description: An hsqldb-related remote code execution vulnerability exists. Recommendations: Update HPE AutoPass License Server to version 9.18 or later...

PT-2025-29766 · WordPress · Responsive Addons For Elementor

Name of the Vulnerable Software and Affected Versions: CyberChimps Responsive Addons for Elementor versions through 1.7.3 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks...

PT-2025-29777 · Nootheme · Nootheme Yogi

Name of the Vulnerable Software and Affected Versions: NooTheme Yogi versions through 2.9.0 Description: The software contains a deserialization of untrusted data flaw that allows for object injection. Recommendations: Update NooTheme Yogi to a version later than 2.9.0...

PT-2025-29804 · Unknown · Smu Manual Dofollow

Name of the Vulnerable Software and Affected Versions: SMu Manual DoFollow versions through 1.8.1 Description: The software contains a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of malicious scripts in...

PT-2025-29782 · WordPress · Thimpress Wp Pipes

Name of the Vulnerable Software and Affected Versions: ThimPress WP Pipes versions through 1.4.3 Description: ThimPress WP Pipes is susceptible to a SQL injection issue due to improper neutralization of special elements used in SQL commands. Recommendations: Update ThimPress WP Pipes to a version...

PT-2025-29798 · WordPress · Elex Woocommerce Advanced Bulk Edit Products

Name of the Vulnerable Software and Affected Versions: ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes versions through 1.4.9 Description: The software contains a SQL injection flaw due to improper neutralization of special elements used in an SQL command. This allows for...

PT-2025-29762 · WordPress · Wp Swings Wallet System For Woocommerce

Name of the Vulnerable Software and Affected Versions: WP Swings Wallet System for WooCommerce versions n/a through 2.6.7 Description: The software contains a Cross-Site Request Forgery CSRF flaw. This issue allows attackers to perform actions on behalf of authenticated users without their...

PT-2025-29723 · Enituretechnology · Residential Address Detection

Name of the Vulnerable Software and Affected Versions: enituretechnology Residential Address Detection versions through 2.5.9 Description: The Residential Address Detection software contains a missing authorization flaw. This allows unauthorized access to functionality not properly constrained by...

PT-2025-29778 · WordPress +1 · Easy Video Player +1

Name of the Vulnerable Software and Affected Versions: FWDesign Easy Video Player Wordpress & WooCommerce versions through 10.0 Description: The software contains a Path Traversal issue due to improper limitation of a pathname to a restricted directory. Recommendations: Update to a version later...

PT-2025-29801 · Unknown · Groundhogg

Name of the Vulnerable Software and Affected Versions: Groundhogg versions through 4.2.1 Description: Groundhogg is susceptible to an unrestricted file upload issue that allows for the upload of a web shell to a web server. Recommendations: Update Groundhogg to a version later than 4.2.1...

PT-2025-29814 · Unknown · Kingdom Creation Media Folder

Name of the Vulnerable Software and Affected Versions: Kingdom Creation Media Folder versions through 1.0.0 Description: The software contains a cross-site scripting issue due to improper neutralization of input during web page generation. This allows for reflected cross-site scripting XSS...

PT-2025-29743 · Crocoblock · Jetsmartfilters

Name of the Vulnerable Software and Affected Versions: Crocoblock JetSmartFilters versions through 3.6.8 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. The vulnerability allows for stored XSS attacks...