16951 matches found
PT-2025-20130 · Unknown · Contextual Related Posts
Name of the Vulnerable Software and Affected Versions: Ajay Contextual Related Posts versions n/a through 4.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an...
PT-2025-20025 · Rt · Rt-Labs P-Net
Name of the Vulnerable Software and Affected Versions: RT-Labs P-Net versions 1.0.1 and earlier Description: A heap-based buffer overflow in RT-Labs P-Net allows an attacker to corrupt the memory of IO devices that use the library by sending a malicious RPC packet. Recommendations: For RT-Labs...
PT-2025-20293 · Unknown · Ixon Vpn Client
Name of the Vulnerable Software and Affected Versions: IXON VPN Client versions prior to 1.4.4 Description: The issue allows Local Privilege Escalation to SYSTEM due to code execution from a configuration file that can be controlled by a low-privileged user. A race condition exists where a...
PT-2025-20164 · Unknown · Ctltwp Wiki Embed
Name of the Vulnerable Software and Affected Versions: ctltwp Wiki Embed versions 1.4.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions 1.4.6 and...
PT-2025-20084 · WordPress · Thimpress Wp Hotel Booking
Name of the Vulnerable Software and Affected Versions: ThimPress WP Hotel Booking versions n/a through 2.1.9 Description: A Cross-Site Request Forgery CSRF issue affects ThimPress WP Hotel Booking, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions n/...
PT-2025-20144 · Unknown · Aweos Wp Lock
Name of the Vulnerable Software and Affected Versions: AWEOS WP Lock versions 1.4.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious...
PT-2025-20216 · Liveagent · Liveagent
Name of the Vulnerable Software and Affected Versions: LiveAgent versions n/a through 4.4.7 Description: A Cross-Site Request Forgery CSRF issue affects the LiveAgent software. This issue allows for Cross Site Request Forgery. Recommendations: For versions n/a through 4.4.7, update to a version...
PT-2025-20095 · Unknown · Solace Extra
Name of the Vulnerable Software and Affected Versions: Solace Extra versions 1.3.1 and earlier Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. This means an attacker can potentially trick the server into making...
PT-2025-20180 · Unknown · Easy Connect
Name of the Vulnerable Software and Affected Versions: EasyMe Connect versions 3.0.3 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions 3.0.3 and earlier, update to...
PT-2025-20204 · Unknown · Otwthemes Sidebar Manager Light
Name of the Vulnerable Software and Affected Versions: OTWthemes Sidebar Manager Light versions 1.18 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions 1.18 and...
PT-2025-20149 · Unknown · Ovation Elements
Name of the Vulnerable Software and Affected Versions: Ovation Elements versions 1.1.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For Ovation...
PT-2025-20042 · Unknown · Smart Manager
Name of the Vulnerable Software and Affected Versions: SmartManagerCN versions prior to SMR May-2025 Release 1 Description: The issue is related to improper access control in SmartManagerCN, which allows local attackers to launch arbitrary activities with SmartManagerCN privilege. This can be...
PT-2025-20143 · Unknown · Robo Gallery
Name of the Vulnerable Software and Affected Versions: Robo Gallery versions through 5.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject maliciou...
PT-2025-20072 · Lemeconsultoria · Galera.App
Name of the Vulnerable Software and Affected Versions: lemeconsultoria HCM galera.app version 4.58.0 Description: The issue allows an attacker to execute arbitrary code through multiple components, including Strategic Planning Perspective Registration, Training Request, Perspective Editing,...
PT-2025-20195 · Unknown · Ajax Load More
Name of the Vulnerable Software and Affected Versions: Ajax Load More versions through 7.3.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This enables an attacker to inject malicious...
PT-2025-20161 · Wbcom Designs · Activity Link Preview For Buddypress
Name of the Vulnerable Software and Affected Versions: Wbcom Designs - Activity Link Preview For BuddyPress versions 1.4.4 and earlier Description: A Server-Side Request Forgery SSRF issue affects the software, allowing for Server Side Request Forgery. Recommendations: For versions 1.4.4 and...
PT-2025-20154 · Wedevs · Webmail
Name of the Vulnerable Software and Affected Versions: weDevs weMail versions 1.14.13 and earlier Description: The issue allows exposure of sensitive system information to an unauthorized control sphere, enabling the retrieval of embedded sensitive data. Recommendations: For weDevs weMail version...
CVE-2025-47420
The CVE-2025-47420 entry applies to Crestron Automate VX, affecting versions 5.6.8161.21536 through 6.4.0.49. The vulnerability is a privilege escalation in the Automate VX component, with a network-exposed attack surface and low privileges required, according to the CVSS data. Remediation guidan...
