PT-2025-22754 · WordPress · Opal Woo Custom Product Variation

Name of the Vulnerable Software and Affected Versions: Opal Woo Custom Product Variation versions 1.2.0 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability. This allows for Path Traversal i...

PT-2025-22787 · Unknown · Majestic Support

Name of the Vulnerable Software and Affected Versions: Majestic Support versions n/a through 1.1.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks against Majestic...

PT-2025-22767 · Woocommerce · Printcart Web To Print Product Designer

Name of the Vulnerable Software and Affected Versions: Printcart Web to Print Product Designer for WooCommerce versions 2.3.8 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for...

PT-2025-22695 · Designthemes · Designthemes Finance Consultant

Name of the Vulnerable Software and Affected Versions: designthemes Finance Consultant versions through 2.8 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions through 2.8, update to a version that fixes the...

PT-2025-22771

Name of the Vulnerable Software and Affected Versions ELEX WordPress HelpDesk & Customer Ticketing System versions 3.2.7 and earlier Description The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server. Recommendations...

PT-2025-22765 · Mojoomla · Mojoomla Hospital Management System

Name of the Vulnerable Software and Affected Versions: mojoomla Hospital Management System versions 4.7.020 through 11 Description: The issue is related to an Incorrect Privilege Assignment vulnerability that allows Privilege Escalation in the mojoomla Hospital Management System. Recommendations:...

PT-2025-22785 · WordPress · Wp Job Portal

Name of the Vulnerable Software and Affected Versions: WP Job Portal versions n/a through 2.3.2 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows for Path Traversal in WP Job Portal. Recommendations: Fo...

PT-2025-22691 · Unknown · Apustheme Butcher

Name of the Vulnerable Software and Affected Versions: ApusTheme Butcher versions n/a through 2.40 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions n/a throug...

PT-2025-22651 · Zohocorp · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADAudit Plus versions below 8511 Description: The issue concerns SQL injection in the OU History report. This allows for potential exploitation. Recommendations: For Zohocorp ManageEngine ADAudit Plus versions below 8511...

PT-2025-22700

Name of the Vulnerable Software and Affected Versions ThemeMakers Car Dealer versions 1.6.6 and earlier Description The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations For ThemeMakers Car Dealer versions 1.6.6 and earlier, update to a version...

PT-2025-22724 · Unknown · Svil4Ok Meta Keywords & Description

Name of the Vulnerable Software and Affected Versions: svil4ok Meta Keywords & Description versions n/a through 0.8 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allo...

PT-2025-22779 · Unknown · Xili-Tidy-Tags

Name of the Vulnerable Software and Affected Versions: xili-tidy-tags versions 1.12.06 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This type of issue occurs when...

PT-2025-22739 · Unknown · My Custom Widgets

Name of the Vulnerable Software and Affected Versions: My Custom Widgets versions n/a through 2.0.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

PT-2025-22745 · Unknown · B2I Investor Tools

Name of the Vulnerable Software and Affected Versions: B2i Investor Tools versions 1.0.7.9 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This type of issue occurs wh...

PT-2025-22768 · Woocommerce · Printcart Web To Print Product Designer

Name of the Vulnerable Software and Affected Versions: Printcart Web to Print Product Designer for WooCommerce versions 2.3.8 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can lead to...

PT-2025-22667 · Gitlab +1 · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 11.6 through 17.10.6 GitLab CE/EE versions 17.11 through 17.11.2 GitLab CE/EE versions 18.0 through 18.0.0 Description: An issue has been discovered in GitLab CE/EE that may cause a Denial of Service DoS when using a...

PT-2025-22788 · Unknown · Catkin Redi Restaurant Reservation

Name of the Vulnerable Software and Affected Versions: catkin ReDi Restaurant Reservation versions n/a through 24.1209 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This means tha...

PT-2025-22731 · Unknown · Seur Oficial

Name of the Vulnerable Software and Affected Versions: SEUR Oficial versions n/a through 2.2.23 Description: The issue affects SEUR Oficial due to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' or PHP Local File Inclusion...

PT-2025-22725 · Indigothemes · Indigothemes Wp Hrm Lite

Name of the Vulnerable Software and Affected Versions: IndigoThemes WP HRM LITE versions 1.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-22694 · WordPress · Ancorathemes Jarvis

Name of the Vulnerable Software and Affected Versions: AncoraThemes Jarvis – Night Club, Concert, Festival WordPress versions 1.8.11 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions 1.8.11 and earlier,...