CyberSecBulletin

Venusweb vulnerabilities

We track 2 vulnerabilities in Venusweb products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 18, 2025.

2vulnerabilities
1critical
1high
0exploited
8.4average CVSS score

Latest Venusweb vulnerabilities

  • 7.1 High severity

    Logtik: Improper Neutralization of Input During Web Page Generation

    CVE-2025-57897Venusweb

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in venusweb Logtik logtik allows Reflected XSS.This issue affects Logtik: from n/a through <= 2.3.

  • 9.8 Critical severity

    EduKart Pro: Improper Privilege Management

    CVE-2025-13559Venusweb

    The EduKart Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3. This is due to the 'edukart_pro_register_user_front_end' function not restricting what user roles a user can register with. This makes it po