社區公告 Felan 插件硬編碼憑證 (CVE-2025-10850)
WordPress Felan Framework plugin <= 1.1.4 - Hardcoded Credentials vulnerability
公共安全通知 Truelysell 密碼漏洞（CVE202510742）
WordPress Truelysell Core plugin <= 1.8.6 - Unauthenticated Arbitrary User Password Change vulnerability
Community Alert Felan Framework Unauthorised Plugin Activation(CVE202510849)
WordPress Felan Framework plugin <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation/Deactivation via process_plugin_actions vulnerability
香港安全警報BookWidgets XSS(CVE202510139)
WordPress WP BookWidgets 插件 <= 0.9 - 已驗證 (貢獻者+) 存儲型跨站腳本漏洞
社區建議 WPBakery 儲存的跨站腳本攻擊 (CVE202511160)
WordPress WPBakery Page Builder 插件 <= 8.6.1 - 透過自訂 JS 模組的儲存跨站腳本漏洞
香港警報簡易SEO儲存型XSS(CVE202510357)
WordPress Simple SEO plugin < 2.0.32 - Contributor+ Stored XSS vulnerability
香港安全建議：壓縮附件刪除 (CVE202511692)
WordPress Zip 附件插件 <= 1.6 - 缺少對有限檔案刪除的授權漏洞
社區安全警報 Keyy 雙因素漏洞（CVE202510293）
WordPress Keyy Two Factor Authentication (like Clef) plugin <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover vulnerability
香港安全諮詢 WPBakery 跨站腳本攻擊 (CVE202511161)
WordPress WPBakery Page Builder plugin <= 8.6.1 - Stored Cross-Site Scripting via vc_custom_heading Shortcode vulnerability
香港安全警報 DocoDoco 上傳漏洞（CVE202510754）
WordPress DocoDoco Store Locator 插件 <= 1.0.1 - 認證 (編輯+) 任意文件上傳漏洞
Chinese (Hong Kong) 
English 
Chinese (China)