Read the docs

Potenza Global Solutions

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Potenza Global Solutions records in CISA KEV

No Potenza Global Solutions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ciyashop 2 records MEDIUM

Records

6 records

TI-2025-00724 CVE-2025-0855 · GHSA-r822-jq42-473c

PGS Core <= 5.8.0 - Unauthenticated PHP Object Injection

Priority MEDIUM 50

The PGS Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.8.0 via deserialization of untrusted input in the 'import_header' function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00694 Published 2025-05-06 No fix listed CWE-502
TI-2024-12848 CVE-2024-13824 · GHSA-c747-j5gc-vwh7

CiyaShop - Multipurpose WooCommerce Theme <= 4.19.0 - Unauthenticated PHP Object Injection

Priority MEDIUM 50

The CiyaShop - Multipurpose WooCommerce Theme theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.19.0 via deserialization of untrusted input in the 'add_ciyashop_wishlist' a…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00681 Published 2025-03-14 No fix listed CWE-502
TI-2025-26091 CVE-2025-39349 · GHSA-gx2x-4jjf-6wf2

WordPress CiyaShop theme <= 4.18.0 - PHP Object Injection vulnerability

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in Potenzaglobalsolutions CiyaShop ciyashop allows Object Injection.This issue affects CiyaShop: from n/a through <= 4.18.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00485 Published 2025-05-19 No fix listed CWE-502
TI-2025-00723 CVE-2025-0853 · GHSA-267q-f3g2-2vj4

PGS Core <= 5.8.0 - Unauthenticated SQL Injection

Priority LOW 39

The PGS Core plugin for WordPress is vulnerable to SQL Injection via the 'event' parameter in the 'save_header_builder' function in all versions up to, and including, 5.8.0 due to insufficient escaping on the user suppli…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0042 Published 2025-05-06 No fix listed CWE-89
TI-2025-00725 CVE-2025-0856 · GHSA-jpqq-22mr-fmc5

PGS Core <= 5.8.0 - Missing Authorization via Multiple Functions

Priority LOW 38

The PGS Core plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 5.8.0.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00294 Published 2025-05-06 No fix listed CWE-862
TI-2025-37484 CVE-2025-60118 · GHSA-5vj6-m6wx-w4w4

WordPress PGS Core Plugin <= 5.9.0 - SQL Injection Vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Potenzaglobalsolutions PGS Core pgs-core allows SQL Injection.This issue affects PGS Core: from n/a through <= 5.9.0.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00329 Published 2025-09-26 No fix listed CWE-89
Open these records in search →