Hong Kong Security Alert Elementor Addons XSS(CVE20258215)
WordPress Responsive Addons for Elementor plugin <= 1.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets vulnerability
Hong Kong Security Advisory CatFolders SQL Injection(CVE20259776)
WordPress CatFolders plugin <= 2.5.2 - Authenticated (Author+) SQL Injection via CSV Import vulnerability
HK Security NGO Alert PagBank PagSeguro SQL(CVE202510142)
WordPress PagBank / PagSeguro Connect plugin <= 4.44.3 - Authenticated (Shop Manager+) SQL Injection vulnerability
Community Security Advisory PeachPay SQL Injection(CVE20259463)
WordPress PeachPay Payments plugin <= 1.117.5 - Authenticated (Contributor+) SQL Injection via order_by Parameter vulnerability
Protect Users from Accessibility Plugin Access Risk(CVE202558976)
WordPress Accessibility Checker by Equalize Digital Plugin <= 1.31.0 - Broken Access Control Vulnerability
Hong Kong Security NGO Warns Welcart XSS Risk(CVE202558984)
WordPress Welcart e-Commerce Plugin <= 2.11.20 - Cross Site Scripting (XSS) Vulnerability
Public Advisory Include Me Plugin XSS Risk(CVE202558983)
WordPress Include Me Plugin <= 1.3.2 - Cross Site Scripting (XSS) Vulnerability
Public Safety Notice Tutor LMS SQL Injection(CVE202558993)
WordPress Tutor LMS Plugin <= 3.7.4 - SQL Injection Vulnerability
Community Alert AutomatorWP Enables Remote Code Execution(CVE20259539)
WordPress AutomatorWP plugin <= 5.3.6 - Missing Authorization To Authenticated (Subscriber+) Remote Code Execution via Automation Creation vulnerability
Doccure Plugin Subscriber File Upload Vulnerability Advisory(CVE20259112)
WordPress Doccure plugin <= 1.4.8 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability