Hong Kong NGO alerts WordPress BizCalendar LFI(CVE20257650)
WordPress BizCalendar Web plugin <= 1.1.0.50 - Authenticated (Contributor+) Local File Inclusion vulnerability
WordPress EventON Lite Information Disclosure Risk(CVE20258091)
WordPress EventON Lite plugin <= 2.4.6 - Authenticated (Contributor+) Information Disclosure vulnerability
香港安全 WordPress Alobaidi 验证码 XSS (CVE20258080)
WordPress Alobaidi 验证码插件 <= 1.0.3 - 经过身份验证的 (管理员+) 存储型跨站脚本通过插件设置漏洞
WordPress B Slider Exposes Subscriber Data(CVE20258676)
Plugin Name B Slider Type of Vulnerability Authenticated Data Exposure CVE Number CVE-2025-8676 Urgency Low CVE Publish Date…
Hong Kong Security Alert WordPress OTP Bypass(CVE20258342)
Urgent: Authentication Bypass in “Login with phone number” (
香港 NGO 警告 WordPress PPWP 漏洞(CVE20255998)
WordPress PPWP 插件 < 1.9.11 - 通过 REST API 漏洞绕过订阅者+ 访问权限
Hong Kong Security QSM CSRF Template Creation(CVE20256790)
WordPress QSM plugin < 10.2.3 - Template Creation via CSRF vulnerability
Hong Kong Security Warns WooCommerce Tip Manipulation(CVE20256025)
WordPress Order Tip for WooCommerce plugin <= 1.5.4 - Unauthenticated Tip Manipulation to Negative Value Leading to Unauthorized Discounts vulnerability
Hong Kong NGO warns WordPress QSM CSRF(CVE20256790)
WordPress QSM plugin < 10.2.3 - Template Creation via CSRF vulnerability
Hong Kong Security Advisory WordPress Slider SSRF(CVE20258680)
WordPress B Slider - Gutenberg Slider Block for WP plugin <= 2.0.0 - Authenticated (Subscriber+) Server-Side Request Forgery vulnerability
Chinese (China) 
English 
Chinese (Hong Kong)