WP-Firewall 安全公告網誌

最新 WordPress 漏洞警報、CVE 分析與緩解指引 — 共 517 篇。

全部公告 (517)

緊急安全公告:Doctreat Core (WordPress)權限提升警報2026-06-10
緊急:UpdraftPlus身份驗證失效警報2026-06-10
緊急:aThemes Addons for Elementor跨站腳本攻擊(XSS)警報2026-06-10
Easy Image Collage (<= 1.13.6, CVE跨站腳本攻擊(XSS)警報2026-06-10
Authenticated跨站腳本攻擊(XSS)警報(CVE-2026-8853)2026-06-10
緊急:CVE-2026-8977跨站腳本攻擊(XSS)警報2026-06-09
WordPress Slider Revolution敏感資料洩露警報(CVE-2026-7542)2026-06-09
緊急:CVE-2026-7556跨站腳本攻擊(XSS)警報2026-06-09
Integration for Freshsales跨站腳本攻擊(XSS)警報2026-06-09
緊急:Ad Inserter跨站腳本攻擊(XSS)警報2026-06-09
All In One WP Security & Firewall跨站腳本攻擊(XSS)警報2026-06-09
Booking Package權限提升警報2026-06-09
Events Calendar for GeoDirectory權限提升警報(CVE-2026-11616)2026-06-09
Recover Exit for WooCommerce遠程檔案包含警報2026-06-09
緊急:Hippoo Mobile App for WooCommerce (<= 1.9.4)存取控制失效警報2026-06-09
6Storage Rentals不安全直接物件引用(IDOR)警報(CVE-2026-9185)2026-06-09
保護 WordPress 登入:最新登入相關漏洞警報嘅實用應對2026-06-09
應對 WordPress 漏洞警報實用指南 — 每位網站擁有者必做之事2026-06-09
CVE-2026-8895跨站腳本攻擊(XSS)警報2026-06-09
緊急安全簡報:What the Latest Vulnerability Feed Means for Your Site — and Exactly What to Do2026-06-09
jQuery Hover Footnotes跨站腳本攻擊(XSS)警報2026-06-09
緊急:CVE-2026-8499(Helpfulcrowd Product Reviews <=1.2.9)Incorrect Authorization Means for Your WordPress Site警報2026-06-09
緊急 WordPress 安全警報2026-06-09
Extra Settings for RocketChat跨站腳本攻擊(XSS)警報2026-06-09
CVE-2026-8904跨站請求偽造(CSRF)警報2026-06-09
CVE-2026-8882跨站腳本攻擊(XSS)警報2026-06-09
WP User Frontend存取控制失效警報2026-06-09
緊急安全公告:WpMobi plugin (≤ 0.0.3) and Practical Mitigations for WordPress Sites跨站請求偽造(CSRF)警報2026-06-09
CVE-2026-8910 (WP Emoticon Rating <= 1.0.1):跨站腳本攻擊(XSS)警報2026-06-09
RomanCart Ecommerce Plugin跨站腳本攻擊(XSS)警報(CVE-2026-8880)2026-06-09
緊急:AJAX Report Comments” Plugin (<= 2.0.4, CVE‑2026‑8902)跨站請求偽造(CSRF)警報2026-06-09
CVE-2026-8883跨站腳本攻擊(XSS)警報2026-06-09
緊急:Authenticated Contributor跨站腳本攻擊(XSS)警報(CVE-2026-7662)2026-06-09
緊急:TinyMCE Shortcode Addon跨站腳本攻擊(XSS)警報2026-06-09
WP‑Ultimate‑Map (<=1.1, CVE‑2026‑8907)跨站請求偽造(CSRF)警報2026-06-09
緊急:jQuery Hover Footnotes (<= 1.4)安全公告警報2026-06-09
緊急:Unlimited Elementor Inner Sections跨站腳本攻擊(XSS)警報2026-06-09
WP Meta Sort Posts (<= 0.9) —Plugin Settings Update警報(CVE‑2026‑8940)2026-06-09
緊急:MailerPress跨站腳本攻擊(XSS)警報2026-06-09
Smart Slider 3目錄遍歷警報(CVE-2026-9197)2026-06-09
WP Maps Plugin跨站腳本攻擊(XSS)警報(CVE-2026-9594)2026-06-09
緩解Recipe Card Blocks嘅跨站腳本攻擊(XSS)問題(發佈於2026-06-09,CVE-2026-3011)2026-06-09
Klamra Paycal for Aspaclaria不安全直接物件引用(IDOR)警報2026-06-09
Squirrly SEO存取控制失效警報2026-06-09
MapPress Maps for WordPress不安全直接物件引用(IDOR)警報(CVE-2026-8839)2026-06-09
Broken存取控制警報(CVE-2026-7665)2026-06-09
Feedzy存取控制失效警報2026-06-08
CVE-2026-8978SQL 注入警報2026-06-08
LatePoint (<= 5.6.0)跨站請求偽造(CSRF)警報2026-06-08
Click to Chat (<= 4.39)跨站腳本攻擊(XSS)警報2026-06-08
CVE-2026-10038i警報2026-06-08
LearnPress存取控制失效警報(CVE-2026-8502)2026-06-08
緊急:Mobile DJ Manager (MDJM)2026-06-08
WPvivid Backup & Migration目錄遍歷警報(CVE-2025-12656)2026-06-08
Stripe Express (<=1.28.0)跨站腳本攻擊(XSS)警報2026-06-08
緊急:Master Addons for Elementor (CVE-2026-9281)跨站腳本攻擊(XSS)警報2026-06-08
加固WordPress以防範跨站腳本攻擊(XSS)(發佈於2026-06-08,CVE-2026-8991)2026-06-08
Authenticated Contributor跨站腳本攻擊(XSS)警報(CVE-2026-8900)2026-06-08
Alba Board存取控制失效警報(CVE-2026-7523)2026-06-08
Frontend User Notes跨站請求偽造(CSRF)警報2026-06-08
緊急:Quiz And Survey Master (QSM)SQL 注入警報2026-06-08
Quick Playground目錄遍歷警報2026-06-08
LearnPress Export/Import (<= 4.1.4)目錄遍歷警報2026-06-08
WPForms ≤ 1.10.0.4 數據真實性驗證不足(CVE-2026-7792):網站擁有者須知2026-06-08
Page‑List Plugin (WordPress)存取控制失效警報2026-06-08
Email Address Encoder跨站腳本攻擊(XSS)警報2026-06-08
緊急:Ad Manager Wd (≤ 1.0.11)2026-06-08
保護Your WordPress Site免受伺服器端請求偽造(SSRF)威脅2026-06-08
緊急:the WordPress “Shared Files” Plugin (<= 1.7.64)路徑遍歷警報2026-06-07
緊急:WP User Manager任意檔案刪除警報(CVE-2026-49766)2026-06-07
緊急:JetSearchSQL 注入警報2026-06-07
緊急:User Registration Stripe存取控制失效警報2026-06-07
緊急安全公告:LatePoint <= 5.5.1權限提升警報2026-06-07
WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja FormsPHP 物件注入警報2026-06-07
緊急安全公告:WP Travel Engine(CVE-2026-49078)2026-06-07
CVE-2026-49082(Chatway Live Chat <=1.4.8)敏感資料洩露警報2026-06-07
緊急 WordPress 漏洞警報2026-06-06
緊急Cornerstone Plugin Arbitrary Code警報(發佈於2026-06-06,CVE-2026-49113)2026-06-06
緊急安全公告:WP Media Folder Addon (<= 4.0.1)任意檔案下載警報2026-06-06
緊急:Upsell Order Bump Offer for WooCommerce身份驗證失效警報2026-06-06
RegistrationMagic (WordPress)身份驗證失效警報2026-06-06
緊急:Welcart e‑Commerce plugin (<= 2.11.28)存取控制失效警報2026-06-06
緊急安全公告:GPTranslateSQL 注入警報(CVE-2026-49776)2026-06-06
緊急:FV Flowplayer (≤ 7.5.51.7212) and2026-06-06
緊急:WPFunnels Pro (≤ 2.9.4)2026-06-06
緊急 WordPress 漏洞警報2026-06-06
緊急 WordPress 安全警報2026-06-06
當 WordPress 漏洞警報失聯時點算 — WP-Firewall 專家指引2026-06-06
Dokan (<= 5.0.2)權限提升警報2026-06-05
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels敏感資料洩露警報2026-06-05
JobSearch (<= 3.2.7)存取控制失效警報2026-06-05
緊急:AutomatorWP跨站腳本攻擊(XSS)警報2026-06-05
Rank Math SEO (<=1.0.271)存取控制失效警報2026-06-05
Really Simple SSL (<= 9.5.10)身份驗證失效警報2026-06-05
緊急:Drag and Drop Multiple File Upload跨站腳本攻擊(XSS)警報2026-06-05
緊急:Ad Manager Wd” plugin (<= 1.0.11)任意檔案下載警報2026-06-05
緊急:Geo Mashup (<= 1.13.19)SQL 注入警報2026-06-05
緊急:Hybrid Composer身份驗證失效警報2026-06-05
CVE-2026-48965XCloner敏感資料洩露警報2026-06-05
CVE-2026-48966Cross-Site Scripting in Funnel Builder by FunnelKit2026-06-05
Really Simple SSL (<= 9.5.9)存取控制失效警報2026-06-05
Essential Blocks for Gutenberg (<= 6.1.3)伺服器端請求偽造(SSRF)警報2026-06-05
緊急:WP Time Slots Booking FormSQL 注入警報2026-06-04
緊急:JS Help Desk (<= 3.0.9)SQL 注入警報2026-06-04
緊急:TrueBooker ≤ 1.1.9 (CVE‑2026‑48881)2026-06-04
緊急:跨站腳本攻擊(XSS)警報2026-06-04
JS Help Desk Plugin (<= 3.0.9)存取控制失效警報2026-06-04
緊急:Montonio for WooCommerce存取控制失效警報2026-06-04
緊急:King Addons for Elementor (<= 51.1.62)跨站腳本攻擊(XSS)警報2026-06-04
緊急安全公告:Amelia權限提升警報2026-06-04
Visual Link Preview (<= 2.4.1)敏感資料洩露警報2026-06-04
緊急:CVE-2026-48880跨站腳本攻擊(XSS)警報2026-06-04
Simple Shopping Cart不安全直接物件引用(IDOR)警報2026-06-04
WP eMember (≤ v10.2.2)敏感資料洩露警報2026-06-04
Content Visibility for Divi BuilderAuthenticated Contributor RCE警報(CVE-2026-1829)2026-06-04
緊急:ARMember Premium權限提升警報(CVE-2026-5076)2026-06-04
緊急:SP Project & Document Manager (<= 4.71)存取控制失效警報2026-06-04
ARMember Premium (CVE-2026-5074)2026-06-04
緊急:ARMember Premium (<= 7.3.1)SQL 注入警報2026-06-04
Passeum Ticketing跨站腳本攻擊(XSS)警報2026-06-03
EmergencyWP跨站請求偽造(CSRF)警報(CVE-2026-9732)2026-06-03
緊急:MasterStudy LMS ProSQL 注入警報2026-06-03
Sunshine Photo Cart (<= 3.6.7)存取控制失效警報2026-06-03
2026-06-03
Unlimited Elements for Elementor” (<= 2.0.8)SQL 注入警報2026-06-03
當 WordPress 漏洞警報失聯時點算 — WP-Firewall 專家指引2026-06-03
Elementor存取控制失效警報(CVE-2026-49782)2026-06-02
緊急:Progress Planner跨站腳本攻擊(XSS)警報2026-06-02
Crew HRM plugin (<=1.2.2, CVE‑2026‑27351)存取控制失效警報2026-06-02
FPW Category Thumbnails跨站腳本攻擊(XSS)警報2026-06-02
Simple History嚴重存取控制缺陷警報(發佈於2026-06-02,CVE-2026-7459)2026-06-02
緊急:未分類警報(CVE-2026-1451)2026-06-02
緊急:hiWeb Migration Simple跨站腳本攻擊(XSS)警報2026-06-02
Spectra Plugin權限提升警報(CVE-2026-7465)2026-06-02
緊急安全公告:rognone (<= 0.6.2)跨站腳本攻擊(XSS)警報2026-06-02
JTL‑Connector for WooCommerce (<= 2.4.1)存取控制失效警報2026-06-02
BirdSeed跨站請求偽造(CSRF)警報(CVE-2026-4071)2026-06-02
Easy Cart跨站腳本攻擊(XSS)警報(CVE-2026-4080)2026-06-02
WP Nano AD跨站腳本攻擊(XSS)警報(CVE-2025-5085)2026-06-01
Auto Image Attributes From Filename With Bulk Updater跨站腳本攻擊(XSS)警報2026-06-01
緊急:DeMomentSomTres Shortcodes跨站腳本攻擊(XSS)警報(CVE-2026-8885)2026-06-01
Laiser Tag跨站請求偽造(CSRF)警報2026-06-01
Broken存取控制警報(CVE-2026-9048)2026-06-01
CVE-2026-9599(Tectite Forms <= 1.3)安全警報2026-06-01
ACF存取控制失效警報2026-06-01
CVE-2026-8422跨站請求偽造(CSRF)警報2026-06-01
Broken存取控制警報(CVE-2026-9050)2026-06-01
Backup and Staging by WP Time Capsule身份驗證失效警報2026-06-01
緊急:Kirki 6.0.0權限提升警報2026-06-01
緊急:LearnPress跨站腳本攻擊(XSS)警報(CVE-2026-48865)2026-06-01
WP Statistics跨站腳本攻擊(XSS)警報(CVE-2026-48839)2026-06-01
加固WooCommerce Infinite Scroll以防範Deserialization(發佈於2026-06-01,CVE-2025-11993)2026-06-01
GutenBee任意檔案上傳警報2026-06-01
HT Contact Form跨站腳本攻擊(XSS)警報(CVE-2026-7052)2026-06-01
緊急安全公告:Crawlomatic Multisite Scraper Post Generator任意檔案上傳警報2026-06-01
緊急:ACF Extended權限提升警報2026-06-01
緊急:WebinarIgnition任意檔案刪除警報2026-06-01
緊急:TableOn (<= 1.0.5.1)SQL 注入警報2026-06-01
QuickWebP任意檔案刪除警報(CVE-2026-42756)2026-06-01
緊急:WordPress Favicon跨站腳本攻擊(XSS)警報2026-06-01
當 WordPress 漏洞警報出現:WP-Firewall 團隊嘅實用專家指南2026-05-22
Broken存取控制警報(CVE-2026-7249)2026-05-22
最新 WordPress 漏洞警報2026-05-22
緊急 WordPress 安全警報2026-05-22
AcyMailing存取控制失效警報(CVE-2026-5200)2026-05-21
緊急:Creative Mail <= 1.6.9SQL 注入警報2026-05-21
Infility GlobalSQL 注入警報2026-05-21
緊急:Kirki 插件(≤ 6.0.6)任意檔案讀取及刪除(CVE-2026-8073)2026-05-21
緊急:CF7 WOW Styler存取控制失效警報2026-05-21
WordPress Zoho ZeptoMail plugin存取控制失效警報(CVE‑2025‑67972)2026-05-21
ProSolution WP Client (<= 2.0.0)任意檔案上傳警報2026-05-21
Mail Mint敏感資料洩露警報2026-05-21
緊急:CVE-2026-4885任意檔案上傳警報2026-05-21
緊急:Account Switcher Plugin身份驗證失效警報2026-05-21
Broadstreet Ads for WordPress (<= 1.52.2)不安全直接物件引用(IDOR)警報2026-05-20
WPB Floating Menu or Categories (<=1.0.8)跨站腳本攻擊(XSS)警報2026-05-20
Gift Cards for WooCommerce Pro (<= 4.2.6)任意檔案上傳警報2026-05-20
Final Tiles Grid Gallery存取控制失效警報2026-05-20
CVE-2026-24573i警報2026-05-20
WpBookingly (<=1.2.9)存取控制失效警報2026-05-20
@libp2p/kad-dht未驗證PUT_VALUE警報(CVE-2026-45783)2026-05-20
NPM 套件 Turbo(@turbo/codemod):Yarn Berry 檢測時意外執行本地代碼2026-05-20
NPM「HAX CMS」DoS 公告對 WordPress 網站嘅影響 — WP-Firewall 實用指引2026-05-20
SillyTavern (<= 1.17.0)伺服器端請求偽造(SSRF)警報2026-05-20
NPM 套件 Turbo(@turbo/workspaces):Yarn Berry 檢測意外執行本地代碼(CVE-2026-45772)2026-05-20
NPM「turbo」Yarn Berry 檢測缺陷對 WordPress 專案嘅威脅 — 而家點做2026-05-20
NPM 供應鏈惡意軟件與你嘅 WordPress 網站:如何檢測、遏制同預防呢類攻擊2026-05-20
Nuxt Nitro「__nuxt_island」共享快取投毒(CVE-2026-46342)— WordPress 網站擁有者須知2026-05-20
NPM 套件camofox:mcp警報2026-05-20
無限制檔案上傳導致 XSS(CVE-2026-46426)— WordPress 網站須知與應對2026-05-20
緊急:@budibase/backend權限提升警報2026-05-20
「JaviBola Custom Theme Test」(≤ 2.0.5)跨站請求偽造 — 影響與防護方法2026-05-20
緊急:Read More & Accordion’ WordPress Plugin (<= 3.5.7)SQL 注入警報2026-05-20
NextGEN Gallery IDOR(CVE-2026-6566)— 每位 WordPress 網站擁有者而家必知必做2026-05-20
緊急:Xpro Elementor Addons存取控制失效警報2026-05-20
Anomify跨站腳本攻擊(XSS)警報2026-05-20
緊急:CVE-2026-6397跨站腳本攻擊(XSS)警報2026-05-20
WordPress Bottom Bar跨站請求偽造(CSRF)警報(CVE‑2026‑6401)2026-05-20
Bigfishgames Syndicate跨站請求偽造(CSRF)警報2026-05-20
Logo Manager For Enamad跨站腳本攻擊(XSS)警報2026-05-20
緊急:Amazon Scraper跨站請求偽造(CSRF)警報2026-05-20
CVE-2026-6399:網站擁有者必知嘅 General Options 插件儲存型 XSS2026-05-20
Child Height Predictor” plugin (<= 1.3)跨站請求偽造(CSRF)警報2026-05-20
Games Catalog Plugin (≤ 1.2.0):2026-05-20
緊急:Word 2 Cash (≤ 0.9.2) —跨站腳本攻擊(XSS)警報(CVE-2026-6395)2026-05-19
緊急:Faces of Users” WordPress跨站腳本攻擊(XSS)警報2026-05-19
Sentence To SEO’ (<=1.0, CVE跨站請求偽造(CSRF)警報2026-05-19
Presto Player存取控制失效警報2026-05-19
CVE-2026-42679任意檔案下載警報2026-05-19
緊急安全公告:Advanced Custom Fields跨站腳本攻擊(XSS)警報2026-05-18
Quick Playground目錄遍歷警報2026-05-18
緊急:“Receive Notifications After Form Submitting – Form Notify for Any Forms” Plugin (CVE-2026-5229)身份驗證失效警報2026-05-18
AI Engine權限提升警報(CVE-2026-8719)2026-05-18
Multicollab (<= 5.2)存取控制失效警報2026-05-18
Essential Chat Support存取控制失效警報2026-05-18
WP Document Revisions (<= 3.8.1)存取控制失效警報2026-05-17
緊急:myCred跨站腳本攻擊(XSS)警報(CVE‑2026‑42676)2026-05-17
緊急:Hydra Booking Plugin (<= 1.1.41)存取控制失效警報2026-05-17
Smart Coupons for WooCommerce存取控制失效警報2026-05-17
緊急:InfusedWoo Pro (<= 5.1.2)伺服器端請求偽造(SSRF)警報2026-05-17
Interactive Geo Maps” (<= 1.6.27)跨站腳本攻擊(XSS)警報2026-05-17
ManageWP Worker (<= 4.9.31)跨站腳本攻擊(XSS)警報2026-05-17
Taskbuilder (<= 5.0.6)SQL 注入警報2026-05-17
FluentForm不安全直接物件引用(IDOR)警報(CVE-2026-5395)2026-05-17
Security Advisory: Advanced Access Manager繞過漏洞警報2026-05-16
應對最新 WordPress 漏洞警報 — WP-Firewall 實用指南2026-05-16
嚴重 WordPress 登入漏洞警報 — 網站擁有者而家必做之事2026-05-16
緊急 WordPress 漏洞警報2026-05-16
緊急:Protect Your Sites from the Smartcat Translator for WPML存取控制失效警報(CVE-2026-4683)2026-05-15
Advanced Custom Fields — Font Awesome Field (CVE-2026-6415)嚴重跨站腳本攻擊(XSS)警報2026-05-15
緊急安全公告:Frontend Admin by DynamiApps權限提升警報(CVE‑2026‑6228)2026-05-15
Receive Notifications After Form Submitting” (Form Notify for Any Forms)身份驗證失效警報2026-05-15
緊急:Quick Playground <= 1.3.3目錄遍歷警報2026-05-15
Classified Listing存取控制失效警報2026-05-14
緊急:FOX Currency Switcher (≤ 1.4.5):2026-05-14
The7 Theme跨站腳本攻擊(XSS)警報(CVE-2026-6646)2026-05-14
Notify Odoo (<= 1.0.1)跨站請求偽造(CSRF)警報2026-05-14
緊急安全公告:NEX‑FormsSQL 注入警報(CVE‑2026‑7046)2026-05-14
Essential Addons for Elementor” (<= 6.5.13)權限提升警報2026-05-14
緊急:InfusedWoo Pro存取控制失效警報2026-05-14
Taskbuilder嚴重SQL 注入警報(發佈於2026-05-14,CVE-2026-6225)2026-05-14
InfusedWoo Pro存取控制失效警報2026-05-14
緊急:InfusedWoo Pro (<= 5.1.2)2026-05-14
Interactive Geo Maps (<= 1.6.27)跨站腳本攻擊(XSS)警報2026-05-14
ManageWP Worker跨站腳本攻擊(XSS)警報2026-05-14
Career Section” Plugin (<=1.7)任意檔案上傳警報2026-05-14
緊急:Burst Statistics (WordPress)身份驗證失效警報(CVE‑2026‑8181)2026-05-14
Motors” WordPress目錄遍歷警報(CVE-2026-3892)2026-05-14
緊急:CVE-2026-5396 — Fluent FormsAuthenticated Subscriber Authorization Bypass警報2026-05-14
FluentForm不安全直接物件引用(IDOR)警報2026-05-14
緊急:Royal Elementor Addons跨站腳本攻擊(XSS)警報(CVE-2026-6504)2026-05-13
Bold Page Builder跨站腳本攻擊(XSS)警報(CVE-2026-3694)2026-05-13
Sensitive資料洩露警報(CVE-2026-6206)2026-05-13
My Calendar (<= 3.7.9)存取控制失效警報2026-05-13
緊急:Broken存取控制警報(CVE-2026-3829)2026-05-13
Media Sync (<= 1.4.9)路徑遍歷警報2026-05-13
Meta Field Block跨站腳本攻擊(XSS)警報2026-05-13
Unlimited Elements For ElementorSQL 注入警報2026-05-13
緊急:LearnPressAuthenticated Subscriber Payment Bypass警報(CVE-2026-7648)2026-05-13
緊急安全公告:The Plus Addons for Elementor跨站腳本攻擊(XSS)警報(CVE-2026-5243)2026-05-13
Envira Photo Gallery跨站腳本攻擊(XSS)警報(CVE-2026-5361)2026-05-13
MonsterInsights (Google Analytics)存取控制失效警報2026-05-13
緊急:Custom Twitter Feeds (Tweets Widget)跨站腳本攻擊(XSS)警報2026-05-13
緊急安全公告:Fusion Builder (Avada)任意檔案下載警報2026-05-13
緊急:Avada (Fusion) BuilderSQL 注入警報2026-05-13
Authenticated SubscriberSQL 注入警報(CVE-2026-4608)2026-05-13
Hostinger Reach存取控制失效警報2026-05-13
Blog2Social (<= 8.9.0)存取控制失效警報2026-05-13
即時 WordPress 威脅簡報 — 近期插件漏洞與你而家必做之事2026-05-13
最新 WordPress 漏洞警報2026-05-13
緊急安全公告:CharitableSQL 注入警報2026-05-13
Broken存取控制警報(CVE-2025-9988)2026-05-13
WPC Badge Management跨站腳本攻擊(XSS)警報2026-05-13
Broken存取控制警報(CVE-2025-14033)2026-05-13
RTMKit存取控制失效警報(CVE-2026-3426)2026-05-13
緊急安全警報:近期披露後保護你嘅 WordPress 登入面2026-05-13
Broadstreet Ads Plugin (<= 1.53.1)敏感資料洩露警報2026-05-13
緊急:2026-05-13
緊急:Cost Calculator Builder (≤ 4.0.1)2026-05-13
ProfileGrid存取控制失效警報2026-05-13
最新 WordPress 漏洞警報2026-05-13
FluentForm跨站腳本攻擊(XSS)警報(CVE-2026-6828)2026-05-13
緊急:WordPress AI Chatbot & Workflow Automation (AIWU) <= 1.4.17 — What to do nowSQL 注入警報2026-05-12
WP Google Maps Integration” plugin (<= 1.2)跨站腳本攻擊(XSS)警報2026-05-12
Eight Day Week Print Workflow” Plugin (<= 1.2.6)SQL 注入警報2026-05-12
Critical:跨站腳本攻擊(XSS)警報(CVE‑2026‑7437)2026-05-12
Rate Star Review” (<= 1.6.4)存取控制失效警報2026-05-12
Authenticated Contributor跨站腳本攻擊(XSS)警報(CVE-2026-3604)2026-05-12
緊急:Motors存取控制失效警報2026-05-12
緊急:the Continually WordPress Plugin (≤ 4.3.1):2026-05-12
BJ Lazy Load跨站腳本攻擊(XSS)警報2026-05-12
Zawgyi Embed (‹= 2.1.1)跨站請求偽造(CSRF)警報2026-05-12
緊急:Next Date跨站腳本攻擊(XSS)警報2026-05-12
WooCommerce Minimum Weight嚴重跨站請求偽造(CSRF)警報(發佈於2026-05-12,CVE-2026-6932)2026-05-12
GWD Conex (<= 2.9)存取控制失效警報2026-05-12
Shortcodely (<= 1.0.1)跨站腳本攻擊(XSS)警報2026-05-11
緊急:Forms Rb存取控制失效警報2026-05-11
HEL Online Classroom (<= 1.0.3)存取控制失效警報2026-05-11
Coinbase Commerce for Contact Form 7 (<=1.1.2)存取控制失效警報2026-05-11
緊急:2026-05-11
緊急安全公告:Advanced Social Media Icons’ (<= 1.2)跨站腳本攻擊(XSS)警報2026-05-11
Logtivity (<= 3.3.6)敏感資料洩露警報2026-05-10
Bus Ticket Booking with Seat Reservation” (plugin < 5.6.8)存取控制失效警報2026-05-10
緊急:WEN Logo Slider跨站腳本攻擊(XSS)警報2026-05-10
最新 WordPress 漏洞警報意味住咩 — 以及如何保護你嘅網站(WP-Firewall 專家)2026-05-10
緊急:eMagicOne Store ManagerSQL 注入警報2026-05-09
Urgent Security Advisory for WordPress Site Owners: CVE-2026-40798 (wpForoSQL 注入警報2026-05-09
跨站請求偽造(CSRF)警報2026-05-07
緊急:Slider Revolution (RevSlider)任意檔案上傳警報2026-05-07
BetterDocs ProSQL 注入警報2026-05-07
Bus Ticket Booking with Seat Reservation” (WP Plugin)存取控制失效警報2026-05-07
the “Team Member” WordPress Plugin (<= 8.5)SQL 注入警報2026-05-07
緊急:WPGraphQL跨站請求偽造(CSRF)警報(CVE-2025-68604)2026-05-07
緊急 WordPress 安全警報2026-05-07
當 WordPress 漏洞警報發佈:保護網站嘅實用專家指南2026-05-07
Forminator敏感資料洩露警報2026-05-07
Broken存取控制警報(CVE-2026-5753)2026-05-06
緊急:Unauthenticated跨站腳本攻擊(XSS)警報(CVE-2026-6817)2026-05-06
Broken存取控制警報(CVE-2026-2306)2026-05-05
FluentForm任意檔案下載警報(CVE-2026-6344)2026-05-05
Geo Mashup (<= 1.13.19)SQL 注入警報2026-05-05
the “Mentoring” WordPress權限提升警報(CVE‑2025‑13618)2026-05-05
MoreConvert Pro (<= 1.9.14)身份驗證失效警報2026-05-05
Import and export users and customers權限提升警報2026-05-05
URGENT: WordPress Temporary Login plugin身份驗證繞過警報(CVE-2026-7567)2026-05-05
緊急:‘User Registration Advanced Fields’ Plugin2026-05-05
Forminator存取控制失效警報2026-05-05
the WordPress User Registration存取控制失效警報2026-05-05
Royal Addons for Elementor跨站腳本攻擊(XSS)警報2026-05-05
GenerateBlocks不安全直接物件引用(IDOR)警報2026-05-05
Total Theme跨站腳本攻擊(XSS)警報2026-05-04
緊急:WP-Clippy跨站腳本攻擊(XSS)警報(CVE-2026-5505)2026-05-04
WordPress DX Sources Plugin (<= 2.0.1) —Settings Update警報(CVE-2026-6700)2026-05-04
緊急:Simple Owl Shortcodes (<= 2.1.1)跨站腳本攻擊(XSS)警報2026-05-04
Broken存取控制警報(CVE-2026-4024)2026-05-04
addfreespace <= 0.1.3跨站請求偽造(CSRF)警報2026-05-04
Amelia (<= 2.1.2)存取控制失效警報2026-05-04
FundPress存取控制失效警報2026-05-04
Jeg Elementor Kit跨站腳本攻擊(XSS)警報2026-05-04
緊急 WordPress 安全警報2026-05-04
緊急安全公告:Event Tickets Plugin (CVE-2026-42662)Bypass警報2026-05-04
近期研究員報告嘅 WordPress 漏洞:網站擁有者而家必做之事2026-05-03
緊急:WP Customer Area (<= 8.3.4)2026-05-03
News & Blog Designer Pack” (<= 3.4.9)跨站腳本攻擊(XSS)警報2026-05-03
“Auto-Install Free SSL” WordPress Plugin (≤ 4.5.0)2026-05-03
嚴重 WordPress 漏洞報告 — 網站擁有者而家必做之事2026-05-02
緊急:WordPress 登入漏洞警報2026-05-02
最新 WordPress 漏洞警報2026-05-01
緊急:CVE-2024-13362跨站腳本攻擊(XSS)警報2026-05-01
保護WordPress Sites免受跨站腳本攻擊(XSS)威脅2026-05-01
緊急:Share警報2026-05-01
緊急:Premmerce Product Filter for WooCommerce (<= 3.7.3)跨站腳本攻擊(XSS)警報2026-05-01
緊急:“Primary Addon for Elementor” (<= 1.6.0):2026-05-01
緊急安全公告:WordPress Radio Player跨站腳本攻擊(XSS)警報2026-05-01
CVE-2024-13362跨站腳本攻擊(XSS)警報2026-05-01
RevivePress (<= 1.5.8)跨站腳本攻擊(XSS)警報2026-05-01
緊急:Otter – Gutenberg Block Plugin身份驗證失效警報(CVE-2026-2892)2026-05-01
Eventin (<= 4.1.8)存取控制失效警報2026-05-01
Groundhogg存取控制失效警報(CVE-2026-40793)2026-04-30
2026 年 4–5 月 WordPress 威脅快照:網站擁有者而家必做之事2026-04-30
當新 WordPress 漏洞與供應商私隱更新登上頭條時點做 — WP-Firewall 指引2026-04-30
最新 WordPress 漏洞警報2026-04-30
緊急安全公告 — Profile Builder Pro XSS(CVE-2026-42385):網站擁有者必做之事2026-04-29
Broken存取控制警報(CVE-2026-4019)2026-04-29
緊急:WP Meteor跨站腳本攻擊(XSS)警報2026-04-29
Groundhogg存取控制失效警報(CVE-2026-40793)2026-04-28
Unauthenticated跨站腳本攻擊(XSS)警報(CVE-2026-5306)2026-04-28
緊急 WordPress 漏洞警報2026-04-27
WordPress Templately Plugin敏感資料洩露警報(CVE-2026-42379)2026-04-27
myCred (<= 3.0.3)存取控制失效警報2026-04-26
HT Mega for Elementor敏感資料洩露警報2026-04-26
WordPress 網站正受活躍攻擊 — 近期漏洞綜述與專家防禦手冊2026-04-26
緊急:Recent警報2026-04-26
Taqnix WordPress插件跨站請求偽造(CSRF)警報(發佈於2026-04-25,CVE-2026-3565)2026-04-25
WP Books Gallery存取控制失效警報2026-04-25
跨站腳本攻擊(XSS)警報2026-04-25
Learnify Theme (≤ 1.15.0) — Immediate Steps for WordPress Site Owners嚴重本地檔案包含警報2026-04-25
緊急:WP Time Slots Booking Form (<=1.2.46)跨站腳本攻擊(XSS)警報2026-04-25
Kapee Theme跨站腳本攻擊(XSS)警報2026-04-25
緊急:WP SMS Plugin敏感資料洩露警報(CVE-2026-40790)2026-04-25
緊急:Roam WordPress Theme (<= 2.1)本地檔案包含警報2026-04-25
Bricks Builder跨站腳本攻擊(XSS)警報(CVE‑2026‑41554)2026-04-25
Monki WordPress 主題(≤ 2.0.5)本地檔案包含:必知事項(CVE-2025-24769)2026-04-25
Social Rocket” WordPress Plugin (<= 1.3.4.2)跨站腳本攻擊(XSS)警報2026-04-25
緊急安全公告:HT Mega for Elementor (< 3.0.7)Unauthenticated PII Disclosure警報(CVE-2026-4106)2026-04-24
MaxiBlocks <= 2.1.8存取控制失效警報2026-04-23
Taqnix <= 1.0.3 —Account Deletion警報(CVE-2026-3565)2026-04-23
Taxi Booking Manager for WooCommerce” Plugin (<= 2.0.0)跨站腳本攻擊(XSS)警報2026-04-23
緊急:CVE-2026-1923跨站腳本攻擊(XSS)警報2026-04-23
緊急安全公告:Breeze Cache任意檔案上傳警報2026-04-23
ExactMetrics存取控制失效警報(CVE-2026-5464)2026-04-23
Gutentor XSS(CVE-2026-2951):網站擁有者須知及 WP-Firewall 點樣保護你2026-04-23
WP Store Locator跨站腳本攻擊(XSS)警報2026-04-23
緊急:Order Minimum/Maximum Amount Limits for WooCommerce’ (<= 4.6.4)跨站腳本攻擊(XSS)警報2026-04-22
“Maximum Products per User for WooCommerce” (≤ 4.3.6)2026-04-22
緊急:WP Responsive Popup + Optin跨站請求偽造(CSRF)警報2026-04-22
2026 年 4 月 WordPress 漏洞綜述 — 漏洞懸賞排行榜揭示嘅趨勢與加固方法2026-04-22
Google PageRank Display跨站請求偽造(CSRF)警報2026-04-22
緊急:Real Estate Pro (<= 1.0.9)跨站腳本攻擊(XSS)警報2026-04-22
Sentence To SEO跨站腳本攻擊(XSS)警報2026-04-22
mCatFilter(≤ 0.5.2)跨站請求偽造 — 網站擁有者須知(及防護方法)2026-04-22
Buzz Comments跨站腳本攻擊(XSS)警報2026-04-22
緊急:WordPress HTTP HeadersCRLF Injection警報2026-04-22
Ni WooCommerce Order Export (<= 3.1.6)2026-04-22
Call To Action’ WordPress跨站請求偽造(CSRF)警報2026-04-22
DX Unanswered Comments (<= 1.7)跨站請求偽造(CSRF)警報2026-04-22
Private WP suite plugin (<= 0.4.1)跨站腳本攻擊(XSS)警報2026-04-22
緊急 WordPress 漏洞警報2026-04-21
Broken存取控制警報(CVE-2026-6703)2026-04-21
Image Source Control跨站腳本攻擊(XSS)警報2026-04-21
Security Advisory: Unauthenticated開放重定向警報(CVE-2026-6675)2026-04-21
Email Encoder Bundle跨站腳本攻擊(XSS)警報2026-04-21
Website LLMs.txt跨站腳本攻擊(XSS)警報2026-04-20
緊急:“Categories Images” plugin (≤ 3.3.1, CVE‑2026‑2505)安全公告警報2026-04-20
緊急:wpForo任意檔案刪除警報(CVE-2026-6248)2026-04-20
wpDataTables跨站腳本攻擊(XSS)警報2026-04-20
緊急:the WordPress ‘Hostel跨站腳本攻擊(XSS)警報2026-04-20
Easy Appointments敏感資料洩露警報2026-04-20
Youzify跨站腳本攻擊(XSS)警報(CVE-2026-1559)2026-04-20
最新 WordPress 漏洞報告警報 — WP-Firewall 實用指引2026-04-20
Urgent Alert: Login-Related WordPress警報2026-04-20
緊急安全公告:CMP任意檔案上傳警報2026-04-19
WpStream任意檔案上傳警報2026-04-19
CVE-2026-4659任意檔案下載警報2026-04-19
WP Statistics跨站腳本攻擊(XSS)警報2026-04-19
緊急安全公告:DirectoryPressSQL 注入警報(CVE-2026-3489)2026-04-19
WP Statistics存取控制失效警報2026-04-19
JetBackup(備份)插件路徑遍歷(CVE-2026-4853)— 網站擁有者而家必做之事2026-04-19
LatePoint不安全直接物件引用(IDOR)警報(CVE-2026-5234)2026-04-19
Better Find and Replace (<= 1.7.9)跨站腳本攻擊(XSS)警報2026-04-18
緊急 WordPress 安全警報2026-04-17
Unlimited Elements for Elementor (<= 2.0.6)2026-04-17
Broken存取控制警報(CVE-2026-4666)2026-04-17
緊急:CMS für Motorrad Werkstätten’ WordPress跨站請求偽造(CSRF)警報2026-04-17
Understanding and Mitigating the Tutor LMS <= 3.9.8SQL 注入警報(CVE-2026-6080)2026-04-17
Kubio AI Page Builder存取控制失效警報(CVE-2026-5427)2026-04-17
Sensitive資料洩露警報(CVE-2026-5234)2026-04-17
緊急:Quiz And Survey Master (QSM)2026-04-17
JetBackup / Backup Guard路徑遍歷警報(CVE-2026-4853)2026-04-17
Urgent Security Brief — Tutor LMS存取控制失效警報2026-04-17
Broken存取控制警報(CVE-2026-6441)2026-04-17
緊急:OneSignal Web Push Notifications存取控制失效警報(CVE‑2026‑3155)2026-04-16
Better Find and Replace嚴重跨站腳本攻擊(XSS)警報(發佈於2026-04-16,CVE-2026-3369)2026-04-16
Broken存取控制警報(CVE-2026-3614)2026-04-16
WP Docs Plugin (<= 2.2.9) and2026-04-16
Riaxe Product Customizer (<= 2.1.2)SQL 注入警報2026-04-16
緊急:the WordPress Career Section任意檔案刪除警報2026-04-16
Barcode Scanner with Inventory & Order Manager” (<= 1.11.0)權限提升警報2026-04-16
緊急 WordPress 安全警報2026-04-16
PostX存取控制失效警報(CVE-2026-0718)2026-04-16
“Email Encoder Bundle” Plugin (CVE-2026-2840)2026-04-16
CVE-2026-3581存取控制失效警報2026-04-16
Livemesh Addons for Elementor(<= 9.0)本地檔案包含 — 影響與防護方法2026-04-16
Custom New User Notification Plugin (<= 1.2.0)跨站腳本攻擊(XSS)警報2026-04-16
Shortcodes Ultimate(≤ 7.4.9)儲存型 XSS 嚴重警報2026-04-15
Understanding and Mitigating the Fusion Builder (Avada)敏感資料洩露警報(CVE‑2026‑1541)2026-04-15
Advanced Custom Fields (ACF)存取控制失效警報2026-04-15
緊急:3D FlipBook Plugin (≤ 1.16.17): Protecting Private & Draft Flipbooks存取控制失效警報2026-04-15
Nexi XPay存取控制失效警報2026-04-15
e存取控制失效警報2026-04-15
Avada (Fusion) Builder內容注入警報2026-04-15
緊急安全公告 — MetForm Pro(<= 3.9.7):未驗證支付金額篡改(CVE)2026-04-15
Responding to the Form MakerSQL 注入警報2026-04-14
緊急 WordPress 安全警報2026-04-13
緊急安全公告:Optimole (<= 4.2.3)跨站腳本攻擊(XSS)警報2026-04-13
緊急:Optimole Plugin跨站腳本攻擊(XSS)警報(CVE-2026-5217)2026-04-13
緊急:Webling <= 3.9.0跨站腳本攻擊(XSS)警報2026-04-13
緊急:UsersWP跨站腳本攻擊(XSS)警報(CVE-2026-5742)2026-04-13
Customer Reviews for WooCommerce’ Plugin (<= 5.103.0)身份驗證失效警報2026-04-13
Tutor LMS (<= 3.9.7)存取控制失效警報2026-04-12
Perfmatters目錄遍歷警報2026-04-12
緊急:New WordPress Login警報2026-04-11
AddFunc Head & Footer跨站腳本攻擊(XSS)警報(CVE-2026-2305)2026-04-10
Download Manager存取控制失效警報2026-04-10
緊急安全公告:WordPress Download Manager (<= 3.3.52)跨站腳本攻擊(XSS)警報2026-04-09
緊急:Broken存取控制警報(CVE-2026-4124)2026-04-09
UsersWP存取控制失效警報2026-04-09
the MStore API Plugin (<= 4.18.3)不安全直接物件引用(IDOR)警報2026-04-09
緊急:Bookly內容注入警報(CVE-2026-2519)2026-04-09
PrivateContent Free跨站腳本攻擊(XSS)警報2026-04-09
緩解 Blog2Social 身份驗證漏洞2026-04-08
Critical Notice for WordPress Sites: Awesome Support不安全直接物件引用(IDOR)警報(CVE-2026-4654)2026-04-08
緊急:SQL Chart BuilderSQL 注入警報2026-04-08
Popup Box Plugin (< 5.5.0) &2026-04-08
WordPress Pinterest Site Verification Plugin跨站腳本攻擊(XSS)警報(CVE-2026-3142)2026-04-08
緊急:Attendance Manager (<= 0.6.2)SQL 注入警報2026-04-08
WP Blockade存取控制失效警報2026-04-08
緊急:WP Visitor Statistics (Real Time Traffic) Plugin2026-04-08
Magic Conversation for Gravity Forms (<= 3.0.97)跨站腳本攻擊(XSS)警報2026-04-08
Authenticated Contributor跨站腳本攻擊(XSS)警報(CVE-2026-4655)2026-04-08
緊急:“Quran Translations” WordPress Plugin (<= 1.7)跨站請求偽造(CSRF)警報2026-04-08
WordPress Columns插件嘅跨站腳本攻擊(XSS)問題(發佈於2026-04-08,CVE-2026-3618)2026-04-08
Riaxe Product Customizer (<=2.4)敏感資料洩露警報2026-04-07
Sports Club Management (<= 1.12.9)跨站腳本攻擊(XSS)警報2026-04-07
緊急:跨站腳本攻擊(XSS)警報(CVE-2026-5508)2026-04-07
The Plus Addons for Elementor跨站腳本攻擊(XSS)警報2026-04-07
WordPress Prime Slider跨站腳本攻擊(XSS)警報(CVE-2026-4341)2026-04-07
Backup Migration存取控制失效警報2026-04-07
MainWP Child Reports Heartbeat 存取控制缺陷運作原理 — 及保護網站嘅實用步驟2026-04-07
Ocean Extra (<= 2.5.3)存取控制失效警報2026-04-07
緊急:Authenticated Subscriber任意檔案刪除警報(CVE-2026-3666)2026-04-07
Amelia 插件 IDOR(CVE-2026-5465):網站擁有者而家必做之事2026-04-07
WP Travel Engine跨站腳本攻擊(XSS)警報(CVE‑2026‑2437)2026-04-05
Gutenverse XSS(CVE-2026-2924):網站擁有者而家必做之事 — WP-Firewall 專家指南2026-04-05
Perfmatters (<= 2.5.9.1)任意檔案刪除警報2026-04-05
Royal Elementor Addons <= 1.7.1049 — Authenticated Contributor跨站腳本攻擊(XSS)警報(CVE-2026-0664)2026-04-03
Gutenverse 儲存型 XSS 嚴重警報(CVE-2026-2924)2026-04-03
緊急:CVE-2026-2480跨站腳本攻擊(XSS)警報2026-04-03
緊急:MSTW League Manager (<= 2.10)跨站腳本攻擊(XSS)警報2026-04-02
WordPress Simple Membership存取控制失效警報(CVE-2026-34886)2026-04-02
Order Listener for WooCommerce遠程代碼執行警報2026-04-02
Export All URLs” (WordPress Plugin)敏感資料洩露警報2026-04-01
保護 WordPress 登入面:最新登入相關漏洞分析與實用防護2026-04-01
Query Monitor XSS(CVE-2026-4267)— 網站擁有者而家必做之事2026-04-01
Shortcodes Ultimate嚴重跨站腳本攻擊(XSS)警報(發佈於2026-04-01,CVE-2026-2480)2026-04-01
緊急安全公告:AmeliaSQL 注入警報2026-04-01
WP-Firewall 網誌