WordPress 登入自訂權限提升公告//發布於 2026-01-30//CVE-2025-14975
Unauthenticated password reset flaw in Custom Login Page Customizer pre-2.5.4 CVE-2025-14975: fixes and mitigations
可利用的 SQL 注入漏洞在 Likes Dislikes 插件中//發布於 2026-01-30//CVE-2025-4840
Share the blog content or main topics for a SEO description under 15 words
Tainacan 存取控制漏洞公告//發布於 2026-01-30//CVE-2025-14043
Urgent guidance for CVE-2025-14043 Broken Access Control in Tainacan WordPress plugin
Modula Gallery 存取控制漏洞//發布於 2026-01-30//CVE-2025-13891
Mitigate Modula Image Gallery CVE-2025-13891 broken access control in WordPress with patch
3DPrint Lite 插件中的關鍵 SQL 注入//發佈於 2026-01-30//CVE-2025-3429
Explains CVE-2025-3429 admin SQL injection in 3DPrint Lite, impact, fixes, and protection
WordPress Buttons 插件中的關鍵 XSS 漏洞//發布於 2026-01-30//CVE-2024-0711
Stored XSS in Buttons Shortcode and Widget plugin on WordPress with remediation guidance
Ocean Extra 插件中發現的 XSS 漏洞//發布於 2026-01-30//CVE-2025-3458
Urgent security advisory: Ocean Extra stored XSS CVE-2025-3458; update to 2.4.7.
在 NextGEN Gallery 中減輕 XSS 風險//發布於 2026-01-30//CVE-2025-2537
Explains NextGEN Gallery DOM-based XSS CVE-2025-2537 and practical defenses for WordPress sites