Community Alert Authenticated XSS in WS Addons(CVE20258062)
WordPress WS Theme Addons plugin <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ws_weather Shortcode vulnerability
Advisory Cross Site Request Forgery Restore Plugin(CVE20257839)
WordPress Restore Permanently delete Post or Page Data plugin <= 1.0 - Cross-Site Request Forgery vulnerability
Alerta de seguridad de Hong Kong: eliminación de feeds de WordPress (CVE20257828)
Plugin WordPress WP Filter & Combine RSS Feeds <= 0.4 - Vulnerabilidad de eliminación de feeds sin autorización para autenticados (Contribuyente+)
Hong Kong Security Advisory Talroo Plugin XSS(CVE20258281)
WordPress WP Talroo plugin <= 2.4 - Reflected XSS vulnerability
Alerta de seguridad de Hong Kong Silencesoft RSS CSRF(CVE20257842)
Plugin de lector RSS Silencesoft de WordPress <= 0.6 - Vulnerabilidad de falsificación de solicitud entre sitios para la eliminación de feeds RSS
HK NGO Warns Fluent Support CSRF Risk(CVE202557885)
Plugin Name Fluent Support Type of Vulnerability CSRF CVE Number CVE-2025-57885 Urgency Low CVE Publish Date 2025-08-22 Source…
Hong Kong Security Notice WPPizza Access Vulnerability(CVE202557894)
WordPress WPPizza Plugin <= 3.19.8 - Broken Access Control Vulnerability
Hong Kong Security Advisory Greenshift Access Flaw(CVE202557884)
WordPress Greenshift Plugin <= 12.1.1 - Broken Access Control Vulnerability
Community Advisory Accessibility Plugin IDOR(CVE202557886)
WordPress Accessibility Checker by Equalize Digital Plugin <= 1.30.0 - Insecure Direct Object References (IDOR) Vulnerability
Hong Kong Alert Jobmonster Theme Data Exposure(CVE202557888)
WordPress Jobmonster Theme <= 4.8.0 - Sensitive Data Exposure Vulnerability