Several software products are affected by high severity vulnerabilities. AgataSoft PingMaster Pro 2.1 has a denial-of-service flaw due to a buffer overflow in its trace route feature. Multiple SQL injection vulnerabilities impact Hotel Guest Hotspot and Altium AES. Altium AES also suffers from HTML injection vulnerabilities. Altium 365 has a permissive CORS policy allowing unauthorized data access. MeetingHub and PrismX MX100 AP controller have arbitrary file upload vulnerabilities. Appsmith versions below 1.94 allow unauthenticated execution of edit-mode actions. Autodesk Fusion has multiple stored XSS vulnerabilities. OpenPLC v3 allows authenticated remote code execution. B&R Automation Studio has an improper certificate validation issue. Backstage is vulnerable to symlink-based path traversal attacks. Typebot.io versions before 3.13.2 expose user credentials. Sufirmam has authentication bypass and brute-force vulnerabilities. Brother BRAdmin Professional has an unquoted service path vulnerability. BuddyPress plugin for WordPress is vulnerable to arbitrary shortcode execution.