Community Alert Missing Authorization in Membership Plugin(CVE202511835)
WordPress Paid Membership Subscriptions plugin <= 2.16.4 - Missing Authorization to Unauthenticated Arbitrary Member Subscription Auto Renewal vulnerability
社区警报 图像比较附加组件未经授权上传 (CVE202510896)
WordPress Elementor 插件的图像比较附加组件 <= 1.0.2.2 - 缺少对经过身份验证 (订阅者+) 的任意插件上传的授权漏洞
社区警报图像比较附加组件上传漏洞 (CVE202510896)
WordPress Elementor 插件的图像比较附加组件 <= 1.0.2.2 - 缺少对经过身份验证 (订阅者+) 的任意插件上传的授权漏洞
安全公告：导航链接插件中的CSRF漏洞（CVE-2025-12188）
WordPress Posts Navigation Links for Sections and Headings plugin <= 1.0.1 - Cross-Site Request Forgery to Settings Update vulnerability
DominoKit 插件存在公共安全风险 (CVE202512350)
WordPress DominoKit plugin <= 1.1.0 - Missing Authorization to Unauthenticated Settings Update vulnerability
香港安全建议：插件权限提升（CVE202512158）
WordPress Simple User Capabilities plugin <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation vulnerability
香港安全警报 Payeer 支付绕过 (CVE202511890)
WordPress Crypto Payment Gateway with Payeer for WooCommerce plugin <= 1.0.3 - Unauthenticated Payment Bypass vulnerability
香港安全建议：SMTP 暴露（CVE202511833）
WordPress Post SMTP插件 <= 3.6.0 - 缺少未经身份验证的电子邮件日志泄露导致的账户接管授权
Protecting Hong Kong Websites Against SiteSEO Vulnerability(CVE202512367)
WordPress SiteSEO plugin <= 1.3.1 - Missing Authorization to Authenticated (Author+) Plugin Settings Update vulnerability
Hong Kong Security Advisory Discourse Plugin Leak(CVE202511983)
WordPress WP Discourse plugin <= 2.5.9 - Authenticated (Author+) Information Exposure vulnerability
Chinese (China) 
English 
Chinese (Hong Kong)