PT-2025-27196 · Unknown · Morten Dalgaard Johansen Dashboard Widget Sidebar

Name of the Vulnerable Software and Affected Versions: Morten Dalgaard Johansen Dashboard Widget Sidebar versions 1.2.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels...

PT-2025-27126 · Designthemes · Designthemes Lms

Name of the Vulnerable Software and Affected Versions: designthemes LMS versions n/a through 9.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inject...

PT-2025-27204 · Lucidcrew · Lucidcrew Wp Forum Server

Name of the Vulnerable Software and Affected Versions: lucidcrew WP Forum Server versions 1.8.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the web...

PT-2025-27250 · Unknown · Tabberneue

Name of the Vulnerable Software and Affected Versions: TabberNeue versions 3.0.0 through 3.1.0 Description: The issue allows any user to insert arbitrary HTML into the DOM by inserting a payload into any allowed attribute of the tag, posing a significant security risk to user data. Recommendation...

PT-2025-27084 · Faster Themes · Fasterthemes Fastbook

Name of the Vulnerable Software and Affected Versions: FasterThemes FastBook versions 1.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inje...

PT-2025-27270 · Marvell · Marvell Qconvergeconsole

Name of the Vulnerable Software and Affected Versions: Marvell QConvergeConsole affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole. The specific flaw exists within the implementation of th...

PT-2025-27090 · Xtraffic · Wp-Optimize

Name of the Vulnerable Software and Affected Versions: WP Optimize By xTraffic versions through 5.1.6 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions through 5.1.6, update to a version later than 5.1.6 to resolve...

PT-2025-27219 · Unknown · Pre-Publish Checklist

Name of the Vulnerable Software and Affected Versions: Pre-Publish Post Checklist versions 3.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions 3.1 a...

PT-2025-27056 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A denial of service issue has been identified. No further details are available regarding the estimated number of potentially affected devices or real-world incidents. Recommendations: At th...

PT-2025-27244

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-27173 · Unknown · Edwardbock Cron Logger

Name of the Vulnerable Software and Affected Versions: EdwardBock Cron Logger versions 1.3.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For EdwardBock Cron...

PT-2025-27275 · Marvell · Marvell Qconvergeconsole

Name of the Vulnerable Software and Affected Versions: Marvell QConvergeConsole affected versions not specified Description: The issue is related to a directory traversal information disclosure problem in the getDriverTmpPath function. This allows for the potential disclosure of sensitive...

PT-2025-27257 · Code Projects · Code-Projects Food Distributor Site

Name of the Vulnerable Software and Affected Versions: code-projects Food Distributor Site version 1.0 Description: A critical issue has been found in the processing of the file /admin/process login.php. The manipulation of the username and password arguments leads to SQL injection. The attack ma...

PT-2025-27089 · Unknown · Evangelische Termine

Name of the Vulnerable Software and Affected Versions: Evangelische Termine versions n/a through 3.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

PT-2025-27217 · Unknown · Raise The Money

Name of the Vulnerable Software and Affected Versions: Raise The Money versions n/a through 5.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting'. Specifically, it is a DOM-Based XSS vulnerability, which allows...

PT-2025-27265 · Marvell · Marvell Qconvergeconsole

Name of the Vulnerable Software and Affected Versions: Marvell QConvergeConsole affected versions not specified Description: The issue is related to a directory traversal information disclosure vulnerability in the getFileUploadBytes function. This allows for potential information disclosure. The...

PT-2025-27177 · WordPress · Blend Media Wordpress Cta

Name of the Vulnerable Software and Affected Versions: Blend Media WordPress CTA versions 1.6.9 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Blend Media WordPress CTA, allowing unauthorized requests. Recommendations: For Blend Media WordPress CTA versions 1.6.9 and...

PT-2025-27155 · Unknown · Quantumcloud Chatbot

Name of the Vulnerable Software and Affected Versions: QuantumCloud ChatBot versions n/a through 6.7.3 Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For versions...

PT-2025-27142

Name of the Vulnerable Software and Affected Versions: diyhi bbs versions up to 6.8 Description: A critical issue has been discovered that affects the getUrl function of the /admin/login file in the HTTP Header Handler component. The manipulation of the Host argument leads to server-side request...

PT-2025-27083 · WordPress · Wp Smartpay

Name of the Vulnerable Software and Affected Versions: WP SmartPay versions 2.7.13 and earlier Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel, allowing authentication abuse. Recommendations: For WP SmartPay versions 2.7.13 and earlier, update to a...