XSS in Shortcode Redirect <=1.02 (CVE-2025-54746) with patch 1.0.03 and WP Firewall protection.

Savoy theme CVE-2025-54736 vulnerability: patch, WAF, and hardening guide for WordPress

Guard WordPress sites against Webba Booking CVE-2025-54729 XSS with WP Firewall and 6.0.6 patch

Urgent JetProductGallery XSS CVE-2025-54749 patch 2.2.0.3 for WordPress.

WordLift XSS vulnerability CVE-2025-53582 fixed in 3.54.6 with mitigation and WAF guidance

Security advisory on CSRF in CM On Demand Search And Replace plugin CVE-2025-54728

Urgent WordPress security update for CM On Demand Search And Replace CVE-2025-54727 stored XSS

Explains WP Membership CVE-2025-54717 vulnerability and how WP‑Firewall blocks exploitation.

CVE-2025-54712: Broken access control in Easy Elementor Addons <=2.2.7; patch, detection, and WAF guidance

Findgo CSRF vulnerability CVE-2025-53587 up to 1.3.57 update to 1.3.58 immediately