PT-2026-6292

Name of the Vulnerable Software and Affected Versions Langroid versions prior to 0.59.32 Description Langroid is a framework used for building applications powered by large-language-models. A weakness exists in the TableChatAgent component where the Web Application Firewall WAF can be bypassed...

WordPress Year Make Model Search for WooCommerce plugin <= 1.0.11 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross Site Request Forgery CSRF to Settings Change vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Year Make Model Search for WooCommerce versions = 1.0.11...

WordPress Url Rewrite Analyzer plugin <= 1.3.3 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by domiee13 in WordPress Plugin Url Rewrite Analyzer versions = 1.3.3...

WordPress Import Social Events plugin <= 1.8.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nguyen Ngoc Quang Bach maysbachs in WordPress Plugin Import Social Events versions = 1.8.5...

WordPress Change Add to Cart Button Text for WooCommerce plugin <= 2.2.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Change Add to Cart Button Text for WooCommerce versions = 2.2.2...

WordPress EAN for WooCommerce plugin <= 5.4.6 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin EAN for WooCommerce versions = 5.4.6...

WordPress Shortlinks by Pretty Links plugin <= 3.6.15 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by domiee13 in WordPress Plugin Shortlinks by Pretty Links versions = 3.6.15...

WordPress Exclusive Addons Elementor plugin <= 2.7.9 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Exclusive Addons Elementor versions = 2.7.9...

WordPress eaSYNC plugin < 1.3.15 - Subscriber+ PayPal Settings Update vulnerability

Subscriber+ PayPal Settings Update vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin eaSYNC versions 1.3.15...

WordPress Polls CP plugin <= 1.0.75 - Admin+ Stored Cross-Site Scripting vulnerability

Admin+ Stored Cross-Site Scripting vulnerability discovered by Chinmay Vishwas Divekar in WordPress Plugin CP Polls versions = 1.0.75...

WordPress Event Calendar plugin <= 1.0.4 - Unauthenticated Arbitrary Calendar Deletion vulnerability

Unauthenticated Arbitrary Calendar Deletion vulnerability discovered by Bob Matyas in WordPress Plugin Event Calendar versions = 1.0.4...

WordPress Ajax Search Lite plugin <= 4.12.2 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Ajax Search Lite versions = 4.12.2...

WordPress Podlove Podcast Publisher plugin < 4.2.1 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Podlove Podcast Publisher versions 4.2.1...

WordPress Prisna GWT plugin < 1.4.14 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Prisna GWT – Google Website Translator versions 1.4.14...

PT-2025-21833 · Unknown · Phpgurukul Directory Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Directory Management System version 2.0 Description: A problematic issue has been found in the PHPGurukul Directory Management System, affecting some unknown functionality of the file /searchdata.php. The manipulation of the...

WordPress Seven Stars theme <= 1.4.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Seven Stars versions = 1.4.4...

WordPress WP Ultimate Tours Builder plugin <= 1.055 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin WP Ultimate Tours Builder versions = 1.055...

WordPress QuickCal plugin <= 1.0.15 - Sensitive Data Exposure Vulnerability

Sensitive Data Exposure Vulnerability discovered by Anhchangmutrang in WordPress Plugin QuickCal - Appointment Booking Calendar for WordPress versions = 1.0.15...

WordPress Interview plugin <= 1.01 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by 0x1ceKing in WordPress Plugin Interview versions = 1.01...

WordPress Uncanny Toolkit for LearnDash plugin <= 3.7.0.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by zaim in WordPress Plugin Uncanny Toolkit for LearnDash versions = 3.7.0.2...