WP Security
WWordPress Vulnerability Database

Advisory CSRF Vulnerability in Quran Gateway(CVE202514164)

  • December 19, 2025
Cross Site Request Forgery (CSRF) in WordPress Quran Gateway Plugin
Read More
WWordPress Vulnerability Database

Protecting Hong Kong Users from Hummingbird Risks(CVE202514437)

  • December 19, 2025
Sensitive Data Exposure in WordPress Hummingbird Plugin
Read More
WWordPress Vulnerability Database

Community Alert XSS Vulnerability in Colibri(CVE202511747)

  • December 18, 2025
Cross Site Scripting (XSS) in WordPress Colibri Page Builder Plugin
Read More
WWordPress Vulnerability Database

Community Security Alert Ultimate Member Access Flaw(CVE202514081)

  • December 17, 2025
Broken Access Control in WordPress Ultimate Member Plugin
Read More
WWordPress Vulnerability Database

Safeguarding Hong Kong WordPress Users from CSRF(CVE202514399)

  • December 17, 2025
Cross Site Request Forgery (CSRF) in WordPress Download Plugins and Themes from Dashboard Plugin
Read More
WWordPress Vulnerability Database

Community Alert SQL Injection in URL Shorteners(CVE202510738)

  • December 16, 2025
SQL Injection in WordPress URL Shortener Plugin
Read More
WWordPress Vulnerability Database

Community Security Alert JAY Login Authentication Flaw(CVE202514440)

  • December 16, 2025
Broken Authentication in WordPress JAY Login & Register Plugin
Read More
WWordPress Vulnerability Database

Community Alert WordPress Plugin Access Vulnerability(CVE202514397)

  • December 16, 2025
Broken Access Control in WordPress Postem Ipsum Plugin
Read More
WWordPress Vulnerability Database

HK Cybersecurity Advisory Directory Kit SQL Injection(CVE202513089)

  • December 16, 2025
SQL Injection in WordPress WP Directory Kit Plugin
Read More
WWordPress Vulnerability Database

Protect Hong Kong Websites from Arbitrary Uploads(CVE202513094)

  • December 16, 2025
Arbitrary File Upload in WordPress WP3D Model Import Viewer Plugin
Read More
WP Security
© 2025 WP-Security.org Disclaimer: WP-Security.org is an independent, non-profit NGO community committed to sharing WordPress security news and information. We are not affiliated with WordPress, its parent company, or any related entities. All trademarks are the property of their respective owners.

hi there 👋 Sign up to receive awesome WP-Security Alert and update in your inbox, every week.

We don’t spam! Read our privacy policy for more info.

Check your inbox or spam folder to confirm your subscription.

en_USEnglish
zh_HKChinese (Hong Kong) zh_CNChinese (China) en_USEnglish

Review My Order

0

Subtotal

Taxes & shipping calculated at checkout

Checkout

 
0