Community Advisory CiyaShop PHP Object Injection(CVE202413824)
PHP Object Injection in WordPress CiyaShop Theme
HK Security Alert XSS in Events Calendar(CVE20261922)
Cross Site Scripting (XSS) in WordPress The Events Calendar Shortcode & Block Plugin
Hong Kong Security Alert WCFM Access Vulnerability(CVE20260845)
Broken Access Control in WordPress WCFM – Frontend Manager for WooCommerce Plugin
Public Advisory WCFM Membership IDOR Vulnerability(CVE202515147)
Insecure Direct Object References (IDOR) in WordPress WCFM Membership Plugin
PopupKit Access Control Vulnerability Advisory(CVE202514895)
Broken Access Control in WordPress PopupKit Plugin
WordPress SVG Plugin XSS Advisory Hong Kong(CVE202411184)
Cross Site Scripting (XSS) in WordPress WP Enabled SVG Plugin
Protect Hong Kong Users from eRoom Exposure(CVE202511760)
Sensitive Data Exposure in WordPress eRoom Plugin
Protect Hong Kong Websites from Maps XSS(CVE202413648)
Cross Site Scripting (XSS) in WordPress Maps for WP Plugin
Whydonate Access Control Risk for Users(CVE202510186)
Broken Access Control in WordPress Whydonate Plugin
Hong Kong Security Advisory LatePoint Plugin XSS(CVE20260617)
Cross Site Scripting (XSS) in WordPress LatePoint Plugin
