Potenza Global Solutions vulnerabilities
We track 3 vulnerabilities in Potenza Global Solutions products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 6, 2025.
Latest Potenza Global Solutions vulnerabilities
- 7.3 High severity
PGS Core: Missing Authorization
The PGS Core plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 5.8.0. This makes it possible for unauthenticated attackers to
- 9.8 Critical severity
PGS Core: Deserialization of Untrusted Data
The PGS Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.8.0 via deserialization of untrusted input in the 'import_header' function. This makes it possible for unauthenticated attackers to inject a PHP Obj
- 7.5 High severity
PGS Core: Improper Neutralization of Special Elements used in an SQL Command
The PGS Core plugin for WordPress is vulnerable to SQL Injection via the 'event' parameter in the 'save_header_builder' function in all versions up to, and including, 5.8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient prep