WWordPress Vulnerability Database Community Security Alert Mobile Redirect XSS Risk(CVE20259884)October 3, 2025 WordPress Mobile Site Redirect plugin <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
WWordPress Vulnerability Database Hong Kong Security Alert JoomSport Vulnerability(CVE20257721)October 3, 2025 WordPress JoomSport plugin <= 5.7.3 - Unauthenticated Directory Traversal to Local File Inclusion vulnerability
WWordPress Vulnerability Database Community Alert Notification Bar CSRF Vulnerability(CVE20259895)October 3, 2025 WordPress Notification Bar plugin <= 2.2 - Cross-Site Request Forgery vulnerability
WWordPress Vulnerability Database Community Alert Meks Easy Maps XSS Vulnerability(CVE20259206)October 3, 2025 WordPress Meks Easy Maps plugin <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
WWordPress Vulnerability Database Hong Kong Cybersecurity Alert WordPress Gallery Injection(CVE20259199)October 3, 2025 WordPress Woo superb slideshow transition gallery with random effect plugin <= 9.1 - Authenticated (Contributor+) SQL Injection vulnerability
WWordPress Vulnerability Database Community Security Notice Authenticated Contributor SQL Injection(CVE20259198)October 3, 2025 WordPress Wp cycle text announcement plugin <= 8.1 - Authenticated (Contributor+) SQL Injection vulnerability
WWordPress Vulnerability Database Community Advisory Flexi Plugin Stored XSS(CVE20259129)October 3, 2025 WordPress Flexi plugin <= 4.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via flexi-form-tag Shortcode vulnerability
WWordPress Vulnerability Database Hong Kong Security Advisory Video Carousel XSS(CVE20259372)October 3, 2025 WordPress Ultimate Multi Design Video Carousel plugin <= 1.4 - Authenticated (Editor+) Stored Cross-Site Scripting vulnerability
WWordPress Vulnerability Database Community Security Notice Mobile Site Redirect Vulnerability(CVE20259884)October 3, 2025 WordPress Mobile Site Redirect plugin <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
WWordPress Vulnerability Database HK NGO alerts Comment Info Detector vulnerability(CVE202510311)October 3, 2025 WordPress Comment Info Detector plugin <= 1.0.5 - Cross-Site Request Forgery to Settings Update vulnerability