PT-2025-43185

Name of the Vulnerable Software and Affected Versions CrocoBlock JetReviews versions through 3.0.0 Description A flaw exists in CrocoBlock JetReviews that allows for PHP Local File Inclusion due to improper control of filename for include/require statements. This issue is related to a PHP Remote...

PT-2025-43188

Name of the Vulnerable Software and Affected Versions Josh Kohlbach Wholesale Suite woocommerce-wholesale-prices versions through 2.2.4.2 Description An incorrect privilege assignment exists in Wholesale Suite, potentially allowing privilege escalation. Recommendations Update to a version later...

PT-2025-43194

Name of the Vulnerable Software and Affected Versions CrocoBlock JetSearch versions through 3.5.10 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-Site Scripting XSS condition. This allows an attacker to...

PT-2025-43229

Name of the Vulnerable Software and Affected Versions WP Store Locator versions through 2.2.260 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. This issue impacts the wp-store-locator plugin. Recommendations Update WP Store...

PT-2025-43259

Name of the Vulnerable Software and Affected Versions VibeThemes WPLMS versions through 1.9.9.8 Description The WPLMS plugin contains a flaw related to improper input handling during web page generation, which allows for Reflected Cross-Site Scripting XSS. This means that malicious code can be...

PT-2025-43248

Name of the Vulnerable Software and Affected Versions appscreo Hello Followers versions through 2.5 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a Reflected Cross-Site Scripting XSS condition. This allows an attacker t...

PT-2025-43159

Name of the Vulnerable Software and Affected Versions Shiva WSAnalytics versions through 1.1.2 Description A flaw exists in Shiva WSAnalytics wsanalytics-google-analytics-and-dashboards that allows for Reflected Cross-site Scripting XSS. This occurs due to improper neutralization of input during...

PT-2025-43144

Name of the Vulnerable Software and Affected Versions librechat version 0.7.9 Description A flaw exists in danny-avila/librechat version 0.7.9 that permits HTML injection through the Accept-Language header. A logged-in user sending an HTTP GET request with a specially crafted Accept-Language head...

PT-2025-43153

Name of the Vulnerable Software and Affected Versions Progress Planner versions prior to 1.8.1 Description An incorrect privilege assignment exists in Progress Planner, potentially allowing privilege escalation. Recommendations Update Progress Planner to version 1.8.1 or later...

PT-2025-43201

Name of the Vulnerable Software and Affected Versions Smash Balloon Social Post Feed versions through 4.3.2 Description An authorization issue exists in Syed Balkhi Smash Balloon Social Post Feed custom-facebook-feed. This allows exploitation of incorrectly configured access control security...

Moodle Multiple Vulnerabilities (MSA-25-0041, MSA-25-0046)

Moodle is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; ifdescription...

PT-2025-45328

Name of the Vulnerable Software and Affected Versions King Addons for Elementor versions through 51.1.36 Description An incorrect privilege assignment exists in King Addons for Elementor, allowing for privilege escalation. The issue allows an attacker to gain elevated privileges within the system...

Mageia: Security Advisory (MGASA-2025-0241)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-43002

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.12 through 7.2.2 Description A flaw exists in the Oracle VM VirtualBox product, specifically within the Core component. A highly privileged attacker with local access can compromise the VirtualBox environment...

Fedora: Security Advisory (FEDORA-2025-52dc5ac7d9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-6029-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-4340-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-42941

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.43 Oracle MySQL versions 8.4.0 through 8.4.6 Oracle MySQL versions 9.0.0 through 9.4.0 Description An issue exists within the InnoDB component of Oracle MySQL Server that could allow a high-privileged...

Fedora: Security Advisory (FEDORA-2025-bcb7f16d26)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-4337-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...