Hong Kong Cybersecurity Alert Analytify Information Exposure(CVE202512521)
WordPress Analytify Pro plugin <= 7.0.3 - Unauthenticated Information Exposure vulnerability
Hong Kong Security Advisory Jobmonster Authentication Bypass(CVE20255397)
WordPress Jobmonster theme <= 4.8.1 - Authentication Bypass vulnerability
Protect Hong Kong Sites From ERI Exploit(CVE202512041)
WordPress ERI File Library plugin <= 1.1.0 - Missing Authorization to Unauthenticated Protected File Download vulnerability
Community Security Advisory Unauthenticated Log Poisoning(CVE202511627)
WordPress Site Checkup AI Troubleshooting with Wizard and Tips for Each Issue plugin <= 1.47 - Unauthenticated Log File Poisoning vulnerability
Hong Kong Security Alert Authenticated File Deletion(CVE20257846)
WordPress User Extra Fields plugin <= 16.7 - Authenticated (Subscriber+) Arbitrary File Deletion via save_fields Function vulnerability
Hong Kong Security Alert WooCommerce Data Exposure(CVE20237320)
WordPress WooCommerce plugin <= 7.8.2 - Sensitive Information Exposure vulnerability
社区警报 WordPress Sync 中的 CSRF 风险 (CVE202511976)
WordPress FuseWP – WordPress 用户同步到电子邮件列表和营销自动化 (Mailchimp, Constant Contact, ActiveCampaign 等) 插件 <= 1.1.23.0 - 跨站请求伪造以同步规则创建漏洞
香港警报 Listeo 存储型 XSS 威胁（CVE20258413）
WordPress Listeo plugin <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via soundcloud Shortcode vulnerability
香港安全警报 GenerateBlocks 选项暴露 (CVE202511879)
WordPress GenerateBlocks plugin <= 2.1.1 - Improper Authorization to Authenticated (Contributor+) Arbitrary Options Disclosure vulnerability
社区建议 PixelYourSite 插件 LFI 风险（CVE202510723）
WordPress PixelYourSite插件 < 11.1.2 - 管理员+ LFI漏洞
Chinese (China) 
English 
Chinese (Hong Kong)