PT-2025-20170 · Unknown · Really Simple Under Construction Page

Name of the Vulnerable Software and Affected Versions: Really Simple Under Construction Page versions 1.4.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

PT-2025-20226 · Unknown · Smaily For Wp

Name of the Vulnerable Software and Affected Versions: Smaily for WP versions 3.1.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions 3.1.6 and earlier,...

PT-2025-20183 · Unknown · Flowdee Amazon Product In A Post

Name of the Vulnerable Software and Affected Versions: flowdee Amazon Product in a Post versions n/a through 5.2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

PT-2025-20092 · Unknown · Xpeedstudio Wp Fundraising Donation/Crowdfunding Platform

Name of the Vulnerable Software and Affected Versions: XpeedStudio WP Fundraising Donation and Crowdfunding Platform versions 1.7.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For XpeedStudio WP...

PT-2025-20089 · Unknown · Crm Perks Integration For Woocommerce/Salesforce

Name of the Vulnerable Software and Affected Versions: CRM Perks Integration for WooCommerce and Salesforce versions 1.7.5 and earlier Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, which can be used for Phishing attacks...

PT-2025-20112 · Unknown · Cozy Blocks

Name of the Vulnerable Software and Affected Versions: Cozy Blocks versions through 2.1.22 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 2.1.22, updat...

PT-2025-20290 · Opentext · Opentext Operations Bridge Manager

Name of the Vulnerable Software and Affected Versions: OpenText Operations Bridge Manager versions 24.2 through 24.4 Description: The issue allows authenticated users to change their password without providing their old password. Recommendations: For versions 24.2 and 24.4, update to a version th...

PT-2025-20404 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.4.0.0 through 9.10.1.0 Description: The issue is an out-of-bounds write vulnerability. A local low privileged attacker could potentially exploit this, leading to denial of service. Recommendations: For Dell...

PT-2025-20177 · Appjetty · Appjetty Wp Jquery Datatable

Name of the Vulnerable Software and Affected Versions: AppJetty WP jQuery DataTable versions through 4.1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-20099 · Hash Form · Hash Form

Name of the Vulnerable Software and Affected Versions: Hash Form versions 1.2.8 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized requests. Recommendations: For versions 1.2.8 and earlier, update to a version that includes a fix for this...

PT-2025-20153 · WordPress · Wpdever Cart Tracking For Woocommerce

Name of the Vulnerable Software and Affected Versions: wpdever Cart tracking for WooCommerce versions 1.0.0 through 1.0.17 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...

PT-2025-20214 · WordPress · Thimpress Wp Pipes

Name of the Vulnerable Software and Affected Versions: ThimPress WP Pipes versions 1.4.2 and earlier Description: The issue is a Server-Side Request Forgery SSRF vulnerability, which allows an attacker to perform unauthorized actions on the server. This can lead to various security issues,...

PT-2025-20317

Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.20 Django versions 5.1 through 5.1.8 Django versions 5.2 through 5.2.0 Description An issue was discovered in Django, where the django.utils.html.strip tags function is vulnerable to a potential denial-of-servic...

PT-2025-20155 · Elementor · Simple Calendar For Elementor

Name of the Vulnerable Software and Affected Versions: Simple calendar for Elementor versions 1.6.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. Recommendations: For versions 1.6.5 and earlier, update to a...

PT-2025-20080 · Unknown · Cc Bmi Calculator

Name of the Vulnerable Software and Affected Versions: CC BMI Calculator versions n/a through 2.1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-20133 · Unknown · Ajay Top 10

Name of the Vulnerable Software and Affected Versions: Ajay Top 10 versions n/a through 4.1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. Recommendations: For versions n/a through...

PT-2025-20220 · Woobox · Woobox

Name of the Vulnerable Software and Affected Versions: Woobox versions n/a through 1.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. Specifically, it is a DOM-Based XSS vulnerability, which allows attackers to...

PT-2025-20128

Name of the Vulnerable Software and Affected Versions Custom Checkout Fields for WooCommerce versions 1.8.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

PT-2025-20056 · Samsung · Samsung Flow

Name of the Vulnerable Software and Affected Versions: Samsung Flow versions prior to 4.9.17.6 Description: The issue is related to improper input validation, allowing local attackers to access data within Samsung Flow. Recommendations: For versions prior to 4.9.17.6, update to version 4.9.17.6 o...

PT-2025-20047 · Samsung · Spengesture Service

Name of the Vulnerable Software and Affected Versions: SpenGesture service versions prior to SMR May-2025 Release 1 Description: The issue is related to the improper handling of insufficient permission in the SpenGesture service, allowing local attackers to track the S Pen position...