Hong Kong Security Alert WooCommerce Data Exposure(CVE20237320)
WordPress WooCommerce plugin <= 7.8.2 - Sensitive Information Exposure vulnerability
社區警報 WordPress Sync 中的 CSRF 風險 (CVE202511976)
WordPress FuseWP – WordPress 用戶同步到電子郵件列表及行銷自動化 (Mailchimp, Constant Contact, ActiveCampaign 等) 插件 <= 1.1.23.0 - 跨站請求偽造以同步規則創建漏洞
Hong Kong Alert Listeo Stored XSS Threat(CVE20258413)
WordPress Listeo plugin <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via soundcloud Shortcode vulnerability
Hong Kong Security Alert GenerateBlocks Options Exposure(CVE202511879)
WordPress GenerateBlocks plugin <= 2.1.1 - Improper Authorization to Authenticated (Contributor+) Arbitrary Options Disclosure vulnerability
社區公告 PixelYourSite 插件 LFI 風險（CVE202510723）
WordPress PixelYourSite 插件 < 11.1.2 - 管理員+ LFI 漏洞
香港安全警報 ZoloBlocks 彈出窗口缺陷 (CVE202512134)
WordPress ZoloBlocks 插件 <= 2.3.11 - 缺少對未經身份驗證的彈出窗口啟用/禁用的授權漏洞
Hong Kong Security Alert WordPress Template CSRF(CVE202512072)
WordPress Disable Content Editor For Specific Template plugin <= 2.0 - Cross-Site Request Forgery to Template Configuration Update vulnerability
Community Alert WordPress RapidResult SQL Injection(CVE202510748)
WordPress RapidResult plugin <= 1.2 - Authenticated (Contributor+) SQL Injection vulnerability
安全通告 任意訂單退款漏洞（CVE202510570）
WordPress WooCommerce插件的靈活退款和退貨 <= 1.0.38 - 缺少對已驗證用戶（訂閱者+）的任意訂單退款授權漏洞
緊急警報 PixelYourSite GDPR 設定被利用 (CVE202510588)
WordPress PixelYourSite plugin <= 11.1.2 – Cross-Site Request Forgery to GDPR Options Modification vulnerability
Chinese (Hong Kong) 
English 
Chinese (China)