Hong Kong Security Notice Event List Escalation(CVE20256366)
WordPress Event List plugin <= 2.0.4 - Authenticated (Subscriber+) Privilege Escalation vulnerability
香港安全警報 插件 CSRF XSS (CVE20256247)
WordPress WordPress Automatic 插件 <= 3.118.0 - 跨站請求偽造到存儲型跨站腳本漏洞
Community Advisory Vibes Plugin SQL Injection Vulnerability(CVE20259172)
WordPress Vibes plugin <= 2.2.0 - Unauthenticated SQL Injection via `resource` Parameter vulnerability
社區安全警報 WordPress插件中的CSRF(CVE202548303)
WordPress Post Type Converter插件 <= 0.6 - 跨站請求偽造 (CSRF) 漏洞
多說評論框 CSRF 安全警報(CVE202548318)
WordPress 多說社會化評論框插件 <= 1.2 - 跨站請求偽造 (CSRF) 對設置變更的漏洞
社區警報 百度分享按鈕存儲 XSS (CVE202548320)
WordPress 百度分享按鈕插件 <= 1.0.6 - CSRF 到存儲 XSS 漏洞
Hong Kong Security Advisory Mesa Widget XSS(CVE202548319)
WordPress Mesa Mesa Reservation Widget plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
香港建議 CSRF 使存儲的 XSS 成為可能(CVE202548321)
WordPress Ultimate twitter profile widget plugin <= 1.0 - CSRF to Stored XSS vulnerability
社區警報 Bravis 插件帳戶接管 (CVE20255060)
Plugin Name Bravis User Type of Vulnerability Account takeover vulnerability CVE Number CVE-2025-5060 Urgency High CVE Publish Date…