PT-2025-22038 · Unknown · Lloyd Saunders Author Box After Posts

Name of the Vulnerable Software and Affected Versions: Lloyd Saunders Author Box After Posts versions 1.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

PT-2025-22089 · Chimpstudio · Chimpstudio Foodbakery

Name of the Vulnerable Software and Affected Versions: Chimpstudio FoodBakery versions n/a through 3.3 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions n/a through 3.3, update to a version that fixes the...

PT-2025-22033 · WordPress · Car Park Booking System

Name of the Vulnerable Software and Affected Versions: Car Park Booking System for WordPress versions n/a through 2.6 Description: The issue is related to a Missing Authorization vulnerability in the Car Park Booking System for WordPress. Recommendations: For versions n/a through 2.6, update to a...

PT-2025-22050 · WordPress · Wp Vegas

Name of the Vulnerable Software and Affected Versions: WP Vegas versions n/a through 2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can inject malicious...

PT-2025-21970 · Unknown · Jetmonsters Mega Menu Block

Name of the Vulnerable Software and Affected Versions: jetmonsters Mega Menu Block versions 1.0.0 through 1.0.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacke...

PT-2025-22090 · Themegoods · Themegoods Altair

Name of the Vulnerable Software and Affected Versions: ThemeGoods Altair versions n/a through 5.2.2 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions n/a through 5.2.2, update to a version later than 5.2.2 to resol...

PT-2025-21959 · Unknown · Shortlinks By Pretty Links

Name of the Vulnerable Software and Affected Versions: Shortlinks by Pretty Links versions 3.6.15 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For versio...

PT-2025-22026 · Ed4Becky · Rootspersona

Name of the Vulnerable Software and Affected Versions: ed4becky Rootspersona versions n/a through 3.7.5 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions n/a...

PT-2025-22060 · Unknown · Syndicate Out

Name of the Vulnerable Software and Affected Versions: Syndicate Out versions n/a through 0.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-22030 · Jnews · Jnews

Name of the Vulnerable Software and Affected Versions: JNews versions n/a through 11.6.5 Description: A Missing Authorization issue has been identified. This issue affects the JNews software. Recommendations: For versions n/a through 11.6.5, update to a version later than 11.6.5 to resolve the...

PT-2025-21999 · Unknown · Mythemes My White

Name of the Vulnerable Software and Affected Versions: mythemes my white versions n/a through 2.0.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

PT-2025-21993 · Woocommerce · Redefiningtheweb Dynamic Pricing & Discounts Lite

Name of the Vulnerable Software and Affected Versions: RedefiningTheWeb Dynamic Pricing & Discounts Lite for WooCommerce versions through 2.0.3 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions. Recommendations: For versions through 2.0.3,...

PT-2025-21989 · Elementor · Elementinvader Addons For Elementor

Name of the Vulnerable Software and Affected Versions: ElementInvader Addons for Elementor versions 1.3.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

PT-2025-21976 · Woocommerce · Pektsekye Year Make Model Search

Name of the Vulnerable Software and Affected Versions: Pektsekye Year Make Model Search for WooCommerce versions 1.0.11 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. This means an attacker can trick a user into...

PT-2025-22032 · Unknown · Ashok G Easy Child Theme Creator

Name of the Vulnerable Software and Affected Versions: Ashok G Easy Child Theme Creator versions 1.3.1 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. This can be exploited by tricking a user...

PT-2025-21954 · Woocommerce · Cost Of Goods For Woocommerce

Name of the Vulnerable Software and Affected Versions: Cost of Goods for WooCommerce versions 3.7.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacke...

PT-2025-21946 · Unknown · Xpro Addons For Beaver Builder – Lite

Name of the Vulnerable Software and Affected Versions: Xpro Addons For Beaver Builder – Lite versions 1.5.5 and earlier Description: The issue affects the Xpro Addons For Beaver Builder – Lite, allowing Stored XSS due to improper neutralization of input during web page generation. Recommendations...

PT-2025-22035 · WordPress · Bimber

Name of the Vulnerable Software and Affected Versions: Bimber - Viral Magazine WordPress Theme versions n/a through 9.2.5 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion'. This allows for...

PT-2025-22004 · Unknown · Jinwen Js O3 Lite

Name of the Vulnerable Software and Affected Versions: jinwen Js O3 Lite versions 1.5.8.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

PT-2025-22053 · Enituretechnology · Enituretechnology Ltl Freight Quotes – Freightquote Edition

Name of the Vulnerable Software and Affected Versions: Eniture Technology LTL Freight Quotes – FreightQuote Edition versions 2.3.11 and earlier Description: The issue affects the Eniture Technology LTL Freight Quotes – FreightQuote Edition due to a Missing Authorization vulnerability, allowing...