Notice: Function _load_textdomain_just_in_time was called incorrectly. Translation loading for the MWP-Firewall domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the init action or later. Please see Debugging in WordPress for more information. (This message was added in version 6.7.0.) in /home/E4wU9yBtpX5OW19y/wpf202503/public_html/wp-includes/functions.php on line 6121

Deprecated: Creation of dynamic property SureCart\Licensing\Updater::$cache_key is deprecated in /home/E4wU9yBtpX5OW19y/wpf202503/public_html/wp-content/plugins/MWP-Firewall/licensing/src/Updater.php on line 22
Plugin Vulnerabilities – WP-Firewall

插件漏洞

(CVE-2025-8216) Sky Addons for Elementor Security Flaw in WordPress Sky Addons Widgets cover

(CVE-2025-8216)Sky Addons for Elementor 安全漏洞,存在於 WordPress Sky Addons Widgets 中

了解影響 Sky Addons for Elementor 外掛程式(最高版本 3.1.4)的緊急安全漏洞。了解如何保護您的 WordPress 網站免受儲存型跨站腳本 (XSS) 威脅。確定更新優先順序、管理使用者權限,並使用防火牆和掃描工具增強防護,打造更安全的線上體驗。

(CVE-2025-48293) Geo Mashup Protect Your Site from Geo Mashup Local File Inclusion cover

(CVE-2025-48293) Geo Mashup 保護您的網站免受 Geo Mashup 本機檔案包含攻擊

Geo Mashup 外掛程式中發現了一個嚴重的本機檔案包含漏洞(版本 <= 1.13.16), posing a significant risk to WordPress sites. Update immediately and consider using managed firewalls to protect against potential attacks and safeguard your site.

[CVE-2025-6262] muse.ai Secure WordPress From Video Plugin XSS Attacks cover

[CVE-2025-6262] muse.ai 保護 WordPress 視訊外掛免受 XSS 攻擊

了解 muse.ai 外掛程式中的儲存型 XSS 漏洞,增強 WordPress 安全性。了解貢獻者如何利用未過濾的短程式碼,並探索切實可行的網站保護措施,包括使用者角色管理和使用 Web 應用防火牆。即使面對低優先級威脅,也要保持警惕,以保障您的線上形象。

XSS Vulnerability Fixed in Slider Revolution Plugin Update cover

Slider Revolution 插件更新中修復了 XSS 漏洞

超過 900 萬個網站使用的流行 Slider Revolution 插件最近面臨未經身份驗證的跨站點腳本 (XSS) 漏洞。我們迅速採取行動,發布了 6.7.0 和 6.7.11 版本來解決這個問題。此事件強調了對 WordPress 外掛程式進行定期安全更新和審核的迫切需求。