PGS Core vulnerabilities

3 known vulnerabilities in PGS Core from Potenza Global Solutions. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  PGS Core: Missing Authorization

  CVE-2025-0856May 6, 2025Potenza Global Solutions

  The PGS Core plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 5.8.0. This makes it possible for unauthenticated attackers to

• 9.8 Critical severity

  PGS Core: Deserialization of Untrusted Data

  CVE-2025-0855May 6, 2025Potenza Global Solutions

  The PGS Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.8.0 via deserialization of untrusted input in the 'import_header' function. This makes it possible for unauthenticated attackers to inject a PHP Obj

• 7.5 High severity

  PGS Core: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-0853May 6, 2025Potenza Global Solutions

  The PGS Core plugin for WordPress is vulnerable to SQL Injection via the 'event' parameter in the 'save_header_builder' function in all versions up to, and including, 5.8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient prep