📝

CMS/サイトビルダー

slug: cms

🛡 関連する脆弱性 76

ID	タイトル	重要度	検知
CVE-2026-66473	Unauthenticated Broken Access Control in Xendit Payment <= 7.1.0 versions.	High	2ヶ月前
CVE-2026-61953	Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 versions.	High	2ヶ月前
CVE-2026-65437	Unauthenticated Cross Site Scripting (XSS) in Spam protection, AntiSpam, FireWall by CleanTalk <=...	High	2ヶ月前
CVE-2026-63030 KEV	【KEV】WordPress Core の脆弱性 (CVE-2026-63030)	Critical	2ヶ月前
CVE-2026-58054	MyBB 1.8.40 does not restrict which usergroup a limited Admin Control Panel user may assign when...	High	3ヶ月前
CVE-2026-3652	The ARForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `value`...	High	3ヶ月前
CVE-2026-46489	SolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, the company logo upload feature accepts any file type without validation. An authenticated administrator can upload an SVG f...	High	4ヶ月前
CVE-2026-5415	The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the...	High	4ヶ月前
CVE-2026-5411	The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the...	High	4ヶ月前
CVE-2026-46392	HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0 of HAX CMS PHP, the `saveFile` endpoint validates upload extensions case-insensitively and writes the filen...	High	4ヶ月前
CVE-2026-1829	The Content Visibility for Divi Builder plugin for WordPress is vulnerable to Remote Code...	High	4ヶ月前
CVE-2026-39555	Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection. ...	High	4ヶ月前
CVE-2026-39553	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File...	High	4ヶ月前
CVE-2026-39552	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File...	High	4ヶ月前
CVE-2025-68886	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File...	High	4ヶ月前
CVE-2025-69369	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File...	High	4ヶ月前
CVE-2025-11262	The Link Whisper Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...	High	4ヶ月前
CVE-2026-42760	Authentication Bypass Using an Alternate Path or Channel vulnerability in revmakx Backup and...	High	4ヶ月前
CVE-2026-42762	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...	High	4ヶ月前
CVE-2026-42753	Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows...	High	4ヶ月前
CVE-2026-42737	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...	High	4ヶ月前
CVE-2026-42735	Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare...	High	4ヶ月前
CVE-2026-42736	Authorization Bypass Through User-Controlled Key vulnerability in wordplus BP Better Messages bp...	High	4ヶ月前
CVE-2026-42745	Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online...	High	4ヶ月前
CVE-2026-42730	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...	High	4ヶ月前
CVE-2026-46408	Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, the checkout endpoint accepts a user-controlled cart_id and uses it to enter t...	High	5ヶ月前
CVE-2026-46367	Duplicate Advisory: phpMyFAQ: Stored XSS via Utils::parseUrl() in comment rendering	High	5ヶ月前
CVE-2026-46407	Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, the backend admin/auth-token endpoint allows an authenticated administrator to...	High	5ヶ月前
CVE-2026-46359	phpMyFAQ has SQL Injection in CurrentUser::setTokenData through unescaped OAuth token fields	High	5ヶ月前
CVE-2026-46366	phpMyFAQ has unauthenticated FAQ permission bypass via getFaqBySolutionId fallback query	High	5ヶ月前