WWordPress Vulnerability Database Hong Kong Security Alert Payeer Payment Bypass(CVE202511890)November 4, 2025 WordPress Crypto Payment Gateway with Payeer for WooCommerce plugin <= 1.0.3 - Unauthenticated Payment Bypass vulnerability
WWordPress Vulnerability Database Hong Kong Security Advisory Post SMTP Exposure(CVE202511833)November 3, 2025 WordPress Post SMTP plugin <= 3.6.0 - Missing Authorization to Account Takeover via Unauthenticated Email Log Disclosure vulnerability
WWordPress Vulnerability Database Protecting Hong Kong Websites Against SiteSEO Vulnerability(CVE202512367)November 3, 2025 WordPress SiteSEO plugin <= 1.3.1 - Missing Authorization to Authenticated (Author+) Plugin Settings Update vulnerability
WWordPress Vulnerability Database Hong Kong Security Advisory Discourse Plugin Leak(CVE202511983)November 3, 2025 WordPress WP Discourse plugin <= 2.5.9 - Authenticated (Author+) Information Exposure vulnerability
WWordPress Vulnerability Database Urgent Alert ERI File Library Unauthenticated Access(CVE202512041)November 1, 2025 WordPress ERI File Library plugin <= 1.1.0 - Missing Authorization to Unauthenticated Protected File Download vulnerability
WWordPress Vulnerability Database Hong Kong Cybersecurity Alert Analytify Information Exposure(CVE202512521)November 1, 2025 WordPress Analytify Pro plugin <= 7.0.3 - Unauthenticated Information Exposure vulnerability
WWordPress Vulnerability Database Hong Kong Security Advisory Jobmonster Authentication Bypass(CVE20255397)November 1, 2025 WordPress Jobmonster theme <= 4.8.1 - Authentication Bypass vulnerability
WWordPress Vulnerability Database Protect Hong Kong Sites From ERI Exploit(CVE202512041)November 1, 2025 WordPress ERI File Library plugin <= 1.1.0 - Missing Authorization to Unauthenticated Protected File Download vulnerability
WWordPress Vulnerability Database Community Security Advisory Unauthenticated Log Poisoning(CVE202511627)October 31, 2025 WordPress Site Checkup AI Troubleshooting with Wizard and Tips for Each Issue plugin <= 1.47 - Unauthenticated Log File Poisoning vulnerability
WWordPress Vulnerability Database Hong Kong Security Alert Authenticated File Deletion(CVE20257846)October 31, 2025 WordPress User Extra Fields plugin <= 16.7 - Authenticated (Subscriber+) Arbitrary File Deletion via save_fields Function vulnerability