https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-13180.htmlhttps://patchthecve.com/cve/CVE-2025-13180.htmlSun, 18 Oct 2026 20:10:00 +0000LOW 3.5: A vulnerability was found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 20250320. Impacted is an unknown function of the file /edit_profile. Performing manipulation of the argument first_name/last_name results in basic cross site scripting. It is possible to https://patchthecve.com/cve/CVE-2025-13179.htmlhttps://patchthecve.com/cve/CVE-2025-13179.htmlSun, 18 Oct 2026 20:10:00 +0000MEDIUM 4.3: A vulnerability has been found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 20250320. This issue affects some unknown processing. Such manipulation leads to cross-site request forgery. The attack may be performed from remote. The exploit has been disclosed thttps://patchthecve.com/cve/CVE-2025-12287.htmlhttps://patchthecve.com/cve/CVE-2025-12287.htmlThu, 08 Oct 2026 11:10:00 +0000MEDIUM 4.7: A security vulnerability has been detected in Bdtask Wholesale Inventory Control and Inventory Management System up to 20251013. This impacts an unknown function of the file /Admin_dashboard/edit_profile. Such manipulation of the argument first_name/last_name leads to sql injection. The attack may bhttps://patchthecve.com/cve/CVE-2008-5493.htmlhttps://patchthecve.com/cve/CVE-2008-5493.htmlTue, 16 Jun 2026 23:00:07 +0000HIGH 7.5: SQL injection vulnerability in track.php in PHPStore Wholesales (aka Wholesale) allows remote attackers to execute arbitrary SQL commands via the id parameter.