PT-2025-17036 · Unknown · Bitsstech Shipment Tracker For Woocommerce

Name of the Vulnerable Software and Affected Versions: bitsstech Shipment Tracker for Woocommerce versions 1.4.23 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means an...

PT-2025-17160 · Devrix · Devrix Restrict User Registration

Name of the Vulnerable Software and Affected Versions: DevriX Restrict User Registration versions 1.0.1 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actio...

PT-2025-17166 · Unknown · Mark Parnell Spark Gf Failed Submissions

Name of the Vulnerable Software and Affected Versions: Mark Parnell Spark GF Failed Submissions versions 1.3.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This mea...

PT-2025-16973 · Unknown · Crudlab Scroll To Top

Name of the Vulnerable Software and Affected Versions: CRUDLab Scroll to Top versions 1.0.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in CRUDLab Scroll to Top...

PT-2025-17102 · Woocommerce · Wallet System For Woocommerce

Name of the Vulnerable Software and Affected Versions: Wallet System for WooCommerce versions n/a through 2.6.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

PT-2025-16983 · Unknown · Ichi Translit It!

Name of the Vulnerable Software and Affected Versions: Ichi translit it! versions n/a through 1.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions n/a through 1.6, update to a version that includes a fix for this issue...

PT-2025-17011 · Unknown · Maxbuttons

Name of the Vulnerable Software and Affected Versions: MaxButtons versions through 9.8.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means an attacker can inject malicious scrip...

PT-2025-17159 · Unknown · Cart66 Cloud

Name of the Vulnerable Software and Affected Versions: Cart66 Cloud versions 2.3.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an attacker can inject...

PT-2025-17142 · Unknown · Otp-Less One Tap Sign In

Name of the Vulnerable Software and Affected Versions: OTP-less one tap Sign in versions n/a through 2.0.58 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting'. This allows for Reflected XSS in OTP-less one tap...

PT-2025-17176 · Vitepos · Vitepos

Name of the Vulnerable Software and Affected Versions: Vitepos versions 3.1.7 and earlier Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel, allowing Authentication Abuse. Recommendations: For versions 3.1.7 and earlier, update to a version later tha...

PT-2025-17097 · Woocommerce · License Manager For Woocommerce

Name of the Vulnerable Software and Affected Versions: License Manager for WooCommerce versions 3.0.9 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

PT-2025-17137 · Unknown · Verowa Connect

Name of the Vulnerable Software and Affected Versions: Verowa Connect versions 3.0.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-17010 · Verge3D · Verge3D

Name of the Vulnerable Software and Affected Versions: Verge3D versions prior to 4.9.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions prior to 4.9.0, update to version 4.9.0 or later to resolve the...

PT-2025-17013 · Woocommerce · Advanced Dynamic Pricing For Woocommerce

Name of the Vulnerable Software and Affected Versions: Advanced Dynamic Pricing for WooCommerce versions n/a through 4.9.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. This means an attacker can trick a user into performing...

PT-2025-16998 · WordPress · Amazon Showcase Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Amazon Showcase WordPress Plugin versions n/a through 2.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

PT-2025-17015 · Unknown · Itron Wp Logger

Name of the Vulnerable Software and Affected Versions: iTRON WP Logger versions prior to 2.2 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions prior to 2.2, updat...

PT-2025-16957 · Undefined · Undefined

🗞️ Apple Patches Two Actively Exploited Zero-Days in iOS, iPadOS, and macOS Apple fixes two zero-day flaws CVE-2025-37059, CVE-2025-37060 actively exploited in iOS, iPadOS, and macOS, risking data theft and device compromise. Update to iOS 18.4, iPadOS 18.4, or macOS Sequoia https://t.co/DTLP2ZYYs...

WordPress CRM Perks plugin <= 1.1.7 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin CRM Perks versions = 1.1.7...

RHSA-2025:3894 Red Hat Security Advisory: kernel-rt security update

Bulletin has no description...

PT-2025-16826 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...