PT-2025-26340 · Unknown · Tm Replace Howdy

Name of the Vulnerable Software and Affected Versions: TM Replace Howdy versions 1.4.2 and earlier Description: A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed on behalf of a user. This issue affects the TM Replace Howdy plugin, enabling Cross Site Request...

PT-2025-26381 · Truong Thanh · Truong Thanh Atp Call Now

Name of the Vulnerable Software and Affected Versions: Truong Thanh ATP Call Now versions 1.0.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This enables attackers to inje...

PT-2025-26413 · Unknown · Beee Tinynav

Name of the Vulnerable Software and Affected Versions: Beee TinyNav versions n/a through 1.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For Beee TinyNav versions n/a through 1.4, update to a version that fixes this issue. At...

PT-2025-26388 · Unknown · Fyrebox Quizzes

Name of the Vulnerable Software and Affected Versions: Fyrebox Quizzes versions n/a through 3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-26452 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 7.10 through 16.11.5 GitLab CE/EE version 17.0 through 17.0.3 GitLab CE/EE version 17.1 through 17.1.1 Description: A Denial of Service DoS condition exists in GitLab CE/EE. An attacker can cause a denial of service by...

PT-2025-26395 · Unknown · Rameez Iqbal Real Estate Manager

Name of the Vulnerable Software and Affected Versions: Rameez Iqbal Real Estate Manager versions n/a through 7.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on the affected system. This is a type of attack whe...

PT-2025-26368 · WordPress · Recipes Manager

Name of the Vulnerable Software and Affected Versions: Recipes manager - WPH versions 1.0.0 through 1.0.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can inje...

PT-2025-26372 · Hand Talk · Hand Talk

Name of the Vulnerable Software and Affected Versions: Hand Talk versions n/a through 6.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious scripts...

PT-2025-26317 · Coros · Coros Pace 3

Name of the Vulnerable Software and Affected Versions: COROS PACE 3 versions through 3.0808.0 Description: An out-of-bounds read vulnerability exists in COROS PACE 3. Sending a crafted Bluetooth Low Energy BLE message forces the device to reboot. Recommendations: Update COROS PACE 3 to a version...

PT-2025-26414 · Unknown · King Rayhan Scroll Up

Name of the Vulnerable Software and Affected Versions: King Rayhan Scroll UP versions n/a through 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables potential attackers ...

PT-2025-26398 · Sitekit · Sitekit

Name of the Vulnerable Software and Affected Versions: Sitekit versions n/a through 1.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to inject malicious...

PT-2025-26421 · Unknown · Esselink.Nu Settings

Name of the Vulnerable Software and Affected Versions: Esselink.nu Settings versions n/a through 2.94 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that also allows Reflected XSS in Esselink.nu Settings. Recommendations: For Esselink.nu Settings versions n/a through...

PT-2025-26373 · Unknown · Ip Based Login

Name of the Vulnerable Software and Affected Versions: brijeshk89 IP Based Login versions n/a through 2.4.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker ca...

PT-2025-26393 · WordPress · Wp Register Profile With Shortcode

Name of the Vulnerable Software and Affected Versions: WP Register Profile With Shortcode versions 3.6.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in WP Register...

PT-2025-26415 · Woocommerce · Change Cart Button Colors

Name of the Vulnerable Software and Affected Versions: Change Cart button Colors WooCommerce versions 1.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS. This means an attacker could potentially trick a user into performing...

PT-2025-26351 · Joe Hoyle · Wpthumb

Name of the Vulnerable Software and Affected Versions: Joe Hoyle WPThumb versions 0.10 and earlier Description: A Server-Side Request Forgery SSRF issue affects Joe Hoyle WPThumb, allowing for Server Side Request Forgery. Recommendations: For Joe Hoyle WPThumb versions 0.10 and earlier, update to...

PT-2025-26364 · Woocommerce · Wetail Woocommerce Fortnox Integration

Name of the Vulnerable Software and Affected Versions: Wetail WooCommerce Fortnox Integration versions through 4.5.5 Description: The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For...

PT-2025-26399 · Unknown · Atakan Au Automatically Hierarchic Categories In Menu

Name of the Vulnerable Software and Affected Versions: Atakan Au Automatically Hierarchic Categories in Menu versions 2.0.9 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS...

PT-2025-26379 · WordPress · Wp-Fb-Autoconnect

Name of the Vulnerable Software and Affected Versions: WP-FB-AutoConnect versions through 4.6.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to inject...

PT-2025-26324 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.11.x through 9.11.15 Mattermost versions 10.5.x through 10.5.5 Mattermost versions 10.6.x through 10.6.5 Mattermost versions 10.7.x through 10.7.2 Mattermost versions 10.8.x through 10.8.0 Description: The issue is relat...