PT-2025-24336 · Unknown · Ltl Freight Quotes – Daylight Edition +2

Name of the Vulnerable Software and Affected Versions: LTL Freight Quotes – Freightview Edition versions 1.0.11 and earlier LTL Freight Quotes – Daylight Edition versions 2.2.6 and earlier LTL Freight Quotes – Day & Ross Edition versions 2.1.10 and earlier Description: The issue is related to...

PT-2025-24114 · Unknown · Cmsminds Pay With Contact Form 7

Name of the Vulnerable Software and Affected Versions: cmsMinds Pay with Contact Form 7 versions 1.0.0 through 1.0.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack...

PT-2025-24233 · Implecode · Implecode Product Catalog Simple

Name of the Vulnerable Software and Affected Versions: impleCode Product Catalog Simple versions 1.8.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can...

PT-2025-24113 · Unknown · Bbpress Api

Name of the Vulnerable Software and Affected Versions: bbPress API versions 1.0.0 through 1.0.14 Description: The issue is related to a Missing Authorization vulnerability in the Pascal Casier bbPress API, which allows exploiting incorrectly configured access control security levels...

Microsoft VP9 Video Extensions RCE Vulnerability (Jun 2025) - Windows

Microsoft VP9 Video Extensions is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2025-24243 · WordPress · Ntc Wp Page Loading

Name of the Vulnerable Software and Affected Versions: NTC WP Page Loading versions 1.0.0 through 1.0.6 Description: A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed on behalf of a user. This issue affects NTC WP Page Loading, enabling Cross Site Request Forgery...

PT-2025-24108 · Unknown · 6Storage Rentals

Name of the Vulnerable Software and Affected Versions: 6Storage Rentals versions n/a through 2.19.5 Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For versions n/a...

PT-2025-24193 · Smartdatasoft · Smartdatasoft Car Repair Services

Name of the Vulnerable Software and Affected Versions: SmartDataSoft Car Repair Services versions n/a through 5.0 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. Recommendations: For versions n/a through 5.0,...

PT-2025-24257 · WordPress · Wp Text Expander

Name of the Vulnerable Software and Affected Versions: WP Text Expander versions 1.0.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations:...

PT-2025-24294 · Synology · File Station

Name of the Vulnerable Software and Affected Versions: File Station 5 versions prior to 5.5.6.4847 Description: An allocation of resources without limits or throttling issue has been reported. If a remote attacker gains a user account, they can exploit this issue to prevent other systems,...

PT-2025-24184 · Unknown · Dor Zuberi Slack Notifications

Name of the Vulnerable Software and Affected Versions: Dor Zuberi Slack Notifications versions through 2.0.7 Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations: For versions...

PT-2025-24235 · WordPress · Magazine3 Wp Multilang

Name of the Vulnerable Software and Affected Versions: Magazine3 WP Multilang versions through 2.4.19 Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

PT-2025-24289

Name of the Vulnerable Software and Affected Versions QuRouter versions prior to 2.5.0.140 Description An improper authentication issue has been reported, affecting the security of the system if an attacker gains local network access. Recommendations For versions prior to 2.5.0.140, update to...

PT-2025-24073 · Themehigh · Themehigh Dynamic Pricing/Discount Rules

Name of the Vulnerable Software and Affected Versions: ThemeHigh Dynamic Pricing and Discount Rules versions 2.2.9 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed. This can lead to security breaches where an...

Debian: Security Advisory (DLA-4210-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-4209-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7556-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-24234 · WordPress · Catchsquare Wp Social Widget

Name of the Vulnerable Software and Affected Versions: catchsquare WP Social Widget versions n/a through 2.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker c...

PT-2025-24298 · Synology · File Station

Name of the Vulnerable Software and Affected Versions: File Station 5 versions prior to 5.5.6.4847 Description: An allocation of resources without limits or throttling issue has been reported. If a remote attacker gains a user account, they can exploit this issue to prevent other systems,...

PT-2025-24172 · WordPress · Wp Wham All Currencies For Woocommerce

Name of the Vulnerable Software and Affected Versions: WP Wham All Currencies for WooCommerce versions n/a through 2.4.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that a...